Bug#745778: openssh-server/permit-root-login should be honored for new installs too

[Salvatore Bonaccorso <carnil@debian.org>]

Hi Ferenc,

On Tue, Jan 31, 2017 at 04:23:07PM +0100, Ferenc Wágner wrote:
> Hi,
> 
> How is this supposed to work now?  On a fresh stretch install, with
> /etc/ssh/sshd_config being identical to /usr/share/openssh/sshd_config,
> dpkg-reconfigure openssh-server does not ask anything:
> 
> # DEBCONF_DEBUG=developer dpkg-reconfigure openssh-server
> debconf (developer): starting /var/lib/dpkg/info/openssh-server.config reconfigure 1:7.4p1-5
> debconf (developer): <-- VERSION 2.0
> debconf (developer): --> 0 2.0
> debconf (developer): <-- SET openssh-server/permit-root-login true
> debconf (developer): --> 0 value set
> debconf (developer): starting /var/lib/dpkg/info/openssh-server.postinst configure 1:7.4p1-5
> debconf (developer): <-- VERSION 2.0
> debconf (developer): --> 0 2.0
> debconf (developer): <-- GET openssh-server/permit-root-login
> debconf (developer): --> 0 true
> debconf (developer): <-- X_LOADTEMPLATEFILE /var/lib/dpkg/info/ucf.templates ucf
> debconf (developer): --> 0
> debconf (developer): <-- STOP
> 
> Should it?  Or did this debconf question become deprecated?

I noticed, in
https://www.debian.org/releases/jessie/amd64/release-notes/ch-information.en.html#openssh

# The "false" value is in fact correct despite being confusing.
$ echo 'openssh-server openssh-server/permit-root-login boolean false' | debconf-set-selections

Regards,
Salvatore