#
# The following option is checked against the SSH configuration file
# 'PermitRootLogin' option. A warning will be displayed if they do not
# match. However, if a value has not been set in the SSH configuration
# file, then a value here of 'yes' or 'unset' will not cause a warning.
# This option has a default value of 'no'.
#
{
    my $PermitRootLogin = $sshd{'PermitRootLogin'} || "no";
    my $status = $sshd{'status'} || 'disabled';
    $OUT .= "ALLOW_SSH_ROOT_USER=";
    if ( $status ne 'enabled' ) {
        $OUT .= 'no';
    } elsif ( $PermitRootLogin eq 'yes' ) {
        $OUT .= 'yes';
    } elsif ( $PermitRootLogin eq 'key' || $PermitRootLogin eq 'nopass' ) {
        $OUT .= 'without-password';
    } else {
        $OUT .= 'no';
    }
}
