group ownership and write permission on lock
The extra line you proposed isn't needed at least on my system. Did you find otherwise on your system?
e /run/lock 0775 - lock -
I just installed from the 1 July livedvd, and my /run/lock is set root:root 755 by default. The lock group isn't used anywhere on the system, oddly enough. The FTDI USB model, using the uirt2_raw driver still has to create lock files, so I did have to change the group ownership/permissions, but that may be a special case. That dongle is also not picked up by the 60-lirc.rules udev rule -- I had to specify vendor and product.