Index: trunk/packages/invirt-console/debian/changelog
===================================================================
--- trunk/packages/invirt-console/debian/changelog	(revision 2313)
+++ trunk/packages/invirt-console/debian/changelog	(revision 2314)
@@ -1,2 +1,8 @@
+invirt-console (0.2.9) unstable; urgency=high
+
+  * Don't allow any sort of port forwarding to the console server.
+
+ -- Evan Broder <broder@mit.edu>  Mon, 27 Apr 2009 20:08:48 -0400
+
 invirt-console (0.2.8) unstable; urgency=low
 
Index: trunk/packages/invirt-console/debian/transform_sshd_config.debathena.invirt
===================================================================
--- trunk/packages/invirt-console/debian/transform_sshd_config.debathena.invirt	(revision 2313)
+++ trunk/packages/invirt-console/debian/transform_sshd_config.debathena.invirt	(revision 2314)
@@ -1,2 +1,4 @@
 #!/usr/bin/perl -0p
 s/^#?PrintLastLog .*$/PrintLastLog no/m or die;
+s/$/\nAllowTcpForwarding no/ or die;
+s/^#?X11Forwarding .*$/X11Forwarding no/m or die;