diff --git a/usr.bin/login/login.c b/usr.bin/login/login.c
index 62f26edda32..3a4f1da143e 100644
--- a/usr.bin/login/login.c
+++ b/usr.bin/login/login.c
@@ -350,7 +350,7 @@ main(argc, argv)
 				/* already authenticated */
 				break;
 			} else if (pwd->pw_passwd[0] == '\0') {
-				if (rootlogin && !rootok) {
+				if (!rootlogin || rootok) {
 					/* pretend password okay */
 					rval = 0;
 					goto ttycheck;