1 files changed, 31 insertions, 0 deletions
diff --git a/meta-openbmc-mods/meta-common/recipes-core/dropbear/files/enable-ssh.sh b/meta-openbmc-mods/meta-common/recipes-core/dropbear/files/enable-ssh.sh
new file mode 100755
index 000000000..01ebe098f
--- /dev/null
+++ b/meta-openbmc-mods/meta-common/recipes-core/dropbear/files/enable-ssh.sh
@@ -0,0 +1,31 @@
+#!/bin/sh
+
+usage="$(basename $0) [-h] [-d] -- Enable/Disable ssh for root user
+where:
+    -h  help
+    -d  disable ssh and remove priv-admin permission for root user"
+
+enable_ssh() {
+    systemctl enable --now dropbear.socket
+    groupmems -g priv-admin -a root
+    echo "Enabled SSH service for root user successful"
+}
+
+disable_ssh() {
+    systemctl disable --now dropbear.socket
+    systemctl stop dropbear@*.service
+    groupmems -g priv-admin -d root
+    echo "Disabled SSH service"
+}
+
+case "$1" in
+"-h")
+    echo ${usage}
+    ;;
+"-d")
+    disable_ssh
+    ;;
+*)
+    enable_ssh
+    ;;
+esac