...
There is no need to setup file permissions if you have followed the Bonsai Framework Apache Virtual Hosting with ACLs article. Extracting the tar while within the directories already setup with ACLs will result in the permissions being inherited.
| Directory | Purpose | Access |
|---|---|---|
| /wp-content/plugins/ | Plugins are dropped in here. | Administrator and developers. |
Configure WordPress
Create Config File for Database Access
...
At least by looks this looks like it may be a good guide to securing wordpress - http://wpsecure.net/basics/
Wordpress' official article to getting started after setup - http://examplecodex.com/blog/wp-admin/install.phpwordpress.org/First_Steps_With_WordPress