diff --git a/root/etc/ssh/sshd_config b/root/etc/ssh/sshd_config
index 448f96a..7d7d527 100644
--- a/root/etc/ssh/sshd_config
+++ b/root/etc/ssh/sshd_config
@@ -4,6 +4,7 @@ StreamLocalBindUnlink yes
 X11Forwarding yes
 AuthorizedKeysFile	.ssh/authorized_keys
 PasswordAuthentication no
+PermitRootLogin no
 ChallengeResponseAuthentication no
 UsePAM yes
 PrintMotd no # pam does that