In invirt-console:

  * Don't allow any sort of port forwarding to the console server.

svn path=/trunk/packages/invirt-console/; revision=2314

diff --git a/debian/changelog b/debian/changelog
index e17585e..ea56aed 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+invirt-console (0.2.9) unstable; urgency=high
+
+  * Don't allow any sort of port forwarding to the console server.
+
+ -- Evan Broder <broder@mit.edu>  Mon, 27 Apr 2009 20:08:48 -0400
+
 invirt-console (0.2.8) unstable; urgency=low
 
   * Add conserver-server to -server's dependencies.

diff --git a/debian/transform_sshd_config.debathena.invirt b/debian/transform_sshd_config.debathena.invirt
index 09d0557..90f6991 100755 (executable)
--- a/debian/transform_sshd_config.debathena.invirt
+++ b/debian/transform_sshd_config.debathena.invirt
@@ -1,2 +1,4 @@
 #!/usr/bin/perl -0p
 s/^#?PrintLastLog .*$/PrintLastLog no/m or die;
+s/$/\nAllowTcpForwarding no/ or die;
+s/^#?X11Forwarding .*$/X11Forwarding no/m or die;