From 20e8a852fae590e5ad0080e794e88c6065636f66 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Lecour?= <jeremy.lecour@gmail.com>
Date: Tue, 10 Oct 2017 23:50:14 +0200
Subject: [PATCH] Handle "PermitRootLogin prohibit-password"

---
 evolinux-base/tasks/root.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/evolinux-base/tasks/root.yml b/evolinux-base/tasks/root.yml
index 71cb9f3d..7e79b657 100644
--- a/evolinux-base/tasks/root.yml
+++ b/evolinux-base/tasks/root.yml
@@ -83,7 +83,7 @@
 - name: disable SSH access for root
   replace:
     dest: /etc/ssh/sshd_config
-    regexp: '^PermitRootLogin (yes|without-password)'
+    regexp: '^PermitRootLogin (yes|without-password|prohibit-password)'
     replace: "PermitRootLogin no"
   notify: reload sshd
   when: evolinux_root_disable_ssh