file:
/etc/ssh/sshd_config:
exists: true
mode: "0644"
owner: root
group: root
filetype: file
contains:
- /^PermitRootLogin prohibit-password/