Bug#431627: ssh: PermitRootLogin yes??

[Bob Tanner <tanner@real-time.com>]

Package: ssh
Version: 1:4.6p1-3
Severity: important

Did a new install of lenny amd64 and I was surprised that 'PermitRootLogin yes'
was default setting in /etc/ssh/sshd_config. Is there a reason for this? Seem
insecure.


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'oldstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.20-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages ssh depends on:
ii  openssh-client              1:4.6p1-3+b1 secure shell client, an rlogin/rsh
ii  openssh-server              1:4.6p1-3+b1 secure shell server, an rshd repla

ssh recommends no packages.

-- no debconf information