Change to "PermitRootLogin without-password" for new installations

Also ask a debconf question when upgrading systems with "PermitRootLogin
yes" from previous versions.

Closes: #298138

1 files changed, 3 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 1b08a3d50..ad96cd6ea 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,6 +10,9 @@ openssh (1:6.6p1-1) UNRELEASED; urgency=medium
       the characters before the wildcard character.
   * Re-enable btmp logging, as its permissions were fixed a long time ago in
     response to #370050 (closes: #341883).
+  * Change to "PermitRootLogin without-password" for new installations, and
+    ask a debconf question when upgrading systems with "PermitRootLogin yes"
+    from previous versions (closes: #298138).
 
   [ Matthew Vernon ]
   * Fix failure to check SSHFP records if server presents a certificate