Don't set "PermitRootLogin yes" on fresh installations (regression introduced in 1:7.4p1-1; closes: #852781).

2 files changed, 8 insertions, 1 deletions

diff --git a/debian/changelog b/debian/changelog
index f75d5b947..4be3d4b21 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+openssh (1:7.4p1-7) UNRELEASED; urgency=medium
+
+  * Don't set "PermitRootLogin yes" on fresh installations (regression
+    introduced in 1:7.4p1-1; closes: #852781).
+
+ -- Colin Watson <cjwatson@debian.org>  Sun, 29 Jan 2017 11:39:05 +0000
+
 openssh (1:7.4p1-6) unstable; urgency=medium
 
   * Remove temporary file on exit from postinst (closes: #850275).
diff --git a/debian/openssh-server.templates b/debian/openssh-server.templates
index 1bc8a3308..27907f25d 100644
--- a/debian/openssh-server.templates
+++ b/debian/openssh-server.templates
@@ -1,6 +1,6 @@
 Template: openssh-server/permit-root-login
 Type: boolean
-Default: false
+Default: true
 _Description: Disable SSH password authentication for root?
  Previous versions of openssh-server permitted logging in as root over SSH
  using password authentication. The default for new installations is now