Well, next installment
I hope we're heading over to auditing and logging and tools and so on if you don't add any comments.
Getting into logging, I just released some Bash packages for honeypot deployment based on the Bash+completion patches from caliban.org and introducing the logging patch by Antonomasia.
It's available for testing at www.rootshell.be/~unspawn/packaging/bash.html . RPM's for now, but you can always use unrpm (Freshmeat), cpio or mc to get the contents.