1 files changed, 27 insertions, 0 deletions

diff --git a/debian/openssh-server.config b/debian/openssh-server.config
new file mode 100644
index 000000000..883dbf41b
--- /dev/null
+++ b/debian/openssh-server.config
@@ -0,0 +1,27 @@
+#! /bin/sh
+set -e
+
+. /usr/share/debconf/confmodule
+db_version 2.0
+
+get_config_option() {
+        option="$1"
+
+        [ -f /etc/ssh/sshd_config ] || return
+
+        # TODO: actually only one '=' allowed after option
+        perl -ne 'print if s/^[[:space:]]*'"$option"'[[:space:]=]+//i' \
+           /etc/ssh/sshd_config 2>/dev/null
+}
+
+if dpkg --compare-versions "$2" lt-nl 1:6.6p1-1 && \
+   [ "$(get_config_option PermitRootLogin)" = yes ]; then
+        if [ "$(getent shadow root | cut -d: -f2)" = "!" ]; then
+                db_set openssh-server/permit-root-login true
+        else
+                db_input high openssh-server/permit-root-login || true
+                db_go
+        fi
+fi
+
+exit 0