file:
  /etc/ssh/sshd_config:
    exists: true
    mode: "0644"
    owner: root
    group: root
    filetype: file
    contains:
      - /^PermitRootLogin prohibit-password/