Moze ktos z Was podpowie mi co jeszcze powinienem = sprawdzic. Jesli
czeka mnie ponowna instalacja i konfiguracja to sie = potne... najgorszy
ten stracony czas.

Ponizej podsylam ten rzeczony skrypt. Moze ktos z Was = zauwazy cos
podejrzanego. Wczesniej wywalilem z niego kilka = sekcji, ktore uznalem
za niepotrzebne i zapuscilem tylko to co = nizej.

Bartek

======================= ========================== ==========

#!/bin/sh

# SECURE.sh performs the following tasks:

# Puts in /etc/hosts.deny file the ALL: ALL@ALL entry, = for blocking all
# exterior access to the machine.

FILE="/etc/hosts.deny"
if [ "`cat ${FILE} | grep 'ALL: ALL@ALL'`" = == "" ]
then
    echo "Updating ${FILE} = (ALL@ALL)."
    if [ ! -e ${FILE}.old ] ; then cp = -p ${FILE} ${FILE}.old ; fi
    cat ${FILE} | egrep -v "# End = of hosts.deny." > ${FILE}.tmp
    echo "ALL: ALL@ALL" = >> ${FILE}.tmp
    echo "# End of = hosts.deny." >> ${FILE}.tmp
    mv ${FILE}.tmp ${FILE}
fi

# Puts in /etc/hosts.allow file the ALL: ALL@127.0.0.1 = : ALLOW entry, giving
# access to the resources of the local = machine.

FILE="/etc/hosts.allow"
if [ "`cat ${FILE} | grep 'ALL: = ALL@127.0.0.1'`" == "" ]
then
    echo "Updating ${FILE} = (ALL@127.0.0.1)."
    if [ ! -e ${FILE}.old ] ; then cp = -p ${FILE} ${FILE}.old ; fi
    cat ${FILE} | egrep -v "# End = of hosts.allow." > ${FILE}.tmp
    echo "ALL: = ALL@127.0.0.1          =   : ALLOW" >> ${FILE}.tmp
    echo "# End of = hosts.allow.." >> ${FILE}.tmp
    mv ${FILE}.tmp ${FILE}
    tcpdchk
fi

# Changes in /etc/host.conf file the order hosts, bind = sequence into the
# more secure order bind, hosts and adds the nospoof = on sequence.

FILE="/etc/host.conf"
if [ "`cat ${FILE} | grep 'order hosts, = bind'`" != "" ]
then
    echo "Updating ${FILE} = (order, nospoof)."
    if [ ! -e ${FILE}.old ] ; then cp = -p ${FILE} ${FILE}.old ; fi
    cat ${FILE} | \
    sed 's/order hosts, bind/order = bind, hosts/' > ${FILE}.tmp
    echo "nospoof on" = >> ${FILE}.tmp
    mv ${FILE}.tmp ${FILE}
fi

# Blocks in /etc/securetty file the access for the = root to all consoles
# except /dev/tty1.

FILE="/etc/securetty"
if [ "`cat ${FILE} | egrep '^tty6'`" != = "" ]
then
    echo "Updating ${FILE} = (tty?)."
    if [ ! -e ${FILE}.old ] ; then cp = -p ${FILE} ${FILE}.old ; fi
    cat ${FILE} | \
    sed 's/^tty2/# tty2/' | \
    sed 's/^tty3/# tty3/' | \
    sed 's/^tty4/# tty4/' | \
    sed 's/^tty5/# tty5/' | \
    sed 's/^tty6/# tty6/' \
    > ${FILE}.tmp
    mv ${FILE}.tmp ${FILE}
fi

# Removes from /etc/group file the news and uucp = groups superfluous in most
# cases. It is equivalent to give groupdel news and = groupdel uucp commands.