diff --git a/evolinux-base/tasks/root.yml b/evolinux-base/tasks/root.yml
index 71cb9f3d..7e79b657 100644
--- a/evolinux-base/tasks/root.yml
+++ b/evolinux-base/tasks/root.yml
@@ -83,7 +83,7 @@
 - name: disable SSH access for root
   replace:
     dest: /etc/ssh/sshd_config
-    regexp: '^PermitRootLogin (yes|without-password)'
+    regexp: '^PermitRootLogin (yes|without-password|prohibit-password)'
     replace: "PermitRootLogin no"
   notify: reload sshd
   when: evolinux_root_disable_ssh