Something changes the /etc/ssh/sshd_config

Lines in bold below have not yet been seen by the customer - those in blue are from the customer

Username : Date : Action : Comments [ close all ]
aewhale_(AEWHC2-9105 : 17/04/07 02:37 PM : Incident created -   I have set the /etc/ssh/sshd_config for root to access to: PermitRootLogin without-password however, after a period of time, I see that it is changed to: PermitRootLogin yes What is changing this? Is this the draksec tool? If so, which question? It would be more intuitive to have a question for ssh root access if this is where it is occurring. These GUI Tools are ineffective in securing the system. Can we get a desciption of what each question effects?
Souza_3556 : 17/04/07 04:01 PM : Reply received -   Hello Sir, Yes, possibly it's draksec, check for Allow remote root login under the sytem's tab option. It's supposed to have a description of the options when you hit the help button. Best Regards Tiago Souza

---