git: 37ec9a153b21 - stable/15 - nuageinit: root should be allowed to log in when disable_root is false

The branch stable/15 has been updated by bapt:

URL: https://cgit.FreeBSD.org/src/commit/?id=37ec9a153b2112d8f7bdc156aeec960feaed1bc6

commit 37ec9a153b2112d8f7bdc156aeec960feaed1bc6
Author:     Navdeep Parhar <np@FreeBSD.org>
AuthorDate: 2026-08-21 20:16:48 +0000
Commit:     Baptiste Daroussin <bapt@FreeBSD.org>
CommitDate: 2026-09-07 04:20:18 +0000

    nuageinit: root should be allowed to log in when disable_root is false
    
    PermitRootLogin is "no" by default and that stopped root from logging in
    even though disable_root was set to false during initialization.
    
    Reviewed by:    bapt
    Sponsored by:   Chelsio Communications
    Differential Revision:  https://reviews.freebsd.org/D59101
    
    (cherry picked from commit a209aac86882d3062318dea4971b2f728463c7e2)
---
 libexec/nuageinit/nuageinit | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libexec/nuageinit/nuageinit b/libexec/nuageinit/nuageinit
index 31daff5c71b9..712a516c5195 100755
--- a/libexec/nuageinit/nuageinit
+++ b/libexec/nuageinit/nuageinit
@@ -603,6 +603,8 @@ local function disable_root(obj, metadata)
 		end
 		opts = opts:gsub("%$USER", "freebsd")
 		opts = opts:gsub("%$DISABLE_USER", "root")
+	else
+		nuage.update_sshd_config("PermitRootLogin", "prohibit-password")
 	end
 	local keys = {}
 	if obj.allow_public_ssh_keys ~= false and