diff --git a/group_vars/hosts.yml b/group_vars/hosts.yml
index d31cc8f44d..6766276c01 100644
--- a/group_vars/hosts.yml
+++ b/group_vars/hosts.yml
@@ -29,4 +29,4 @@ stig_version: rhel7
 security_rhel7_enable_linux_security_module: "{{ ansible_os_family == 'RedHat' | ternary(false, true) }}"
 
 # All our ansible tasks run as root user, we need to allow direct root login
-security_sshd_permit_root_login: yes
+security_sshd_permit_root_login: 'without-password'