This is a think tank for making 2nd init load aosp based roms. It currently loads only init.rc. Attached below is the zip file I have made of where I currently stand with 2nd init. Please only download it if you want to help fix it. It probably doesnt work yet.
2nd init is further than the attached in this build (This is a full CM build) The script that is currently being hammered out is mot_boot_mode inside of /system/bin/ Also note that I have made the update script work in the build.
http://www.multiupload.com/4QG0NHCRG7
Hope this is what you needed:
http://www.multiupload.com/X0GM6Q60S3
Here ya go extracted boot.img from cm7-atrix nightly
rename it to .tgz as it wouldnt let me upload that lol
This is the ramdisk uncompressed did you need the kernel as well?
Nope, no need for the kernel. Checking those files now.
Edit: That was exactly what I needed, thanks!
K im asking the X and D2G devs for help with how to make it load a hijack zip rather than what it's doing. Hopefully we have this fixed soon. I know whats wrong but I just can't get it to work right. It isn't drawing the screen when I use the wrapper because it doesnt use the task sets so I am seeing if the shell script we use to execute we could make it load a hijack zip.
Good luck, this community can be secretive @ times
I suspect this thread will gradually decline like the other so i if can suggest, change the title to status update. And continue to update the top post with the newest info. And a mod might wanna move it to general but i personal think it should be here as it is an active dev project.
I think in this way maybe we can start to have a public dev conversation and perhaps pool efforts from others that have similar goals. I know of a few others that are tackling the same issues for different purposes.
Seems the ways things are set up here it discourages anything but releases in the dev section. Perhaps its time for a dev q&a forum lol ...
Allot of things make our situation unique which draws allot of blank stares in the general dev forums.
EDIT:
Yay 200th post lol
aceoyame said:
K im asking the X and D2G devs for help with how to make it load a hijack zip rather than what it's doing. Hopefully we have this fixed soon. I know whats wrong but I just can't get it to work right. It isn't drawing the screen when I use the wrapper because it doesnt use the task sets so I am seeing if the shell script we use to execute we could make it load a hijack zip.
Click to expand...
Click to collapse
Im not familiar with a hijack.zip this being my first android device.. Is it a zip to replace the contents of the init ramdisk?? If so why not just use some space in /system?
mastafunk said:
Im not familiar with a hijack.zip this being my first android device.. Is it a zip to replace the contents of the init ramdisk?? If so why not just use some space in /system?
Click to expand...
Click to collapse
As far as I know, it loads 2nd-init via exec command, which init then loads and does a hijack.killall and KILLS everything in sight, and then remounts /system as whatever it's booting so recovery would become /system. I think that's how it works? It's all so confusing to me.
aceoyame: You might benefit from getting in touch with RevNumbers, he does nightlies for the CM 4 Droid X w/ Gingerbread Kernel, so he has a lot of experience with 2nd-init and how to make it work.
0vermind said:
As far as I know, it loads 2nd-init via exec command, which init then loads and does a hijack.killall and KILLS everything in sight, and then remounts /system as whatever it's booting so recovery would become /system. I think that's how it works? It's all so confusing to me.
Click to expand...
Click to collapse
The implementations i have seen launch second init via a bash hijack or a mount script. The other stuff you describe is a function of second init, and not of any hijack.zip. From searching elsewhere it looks like a hijack.zip is a compressed filesystem for 2ndinit potentialy containing init scripts etc.. but i could be way off..
So this may be beating a dead horse but is there source for our specific 2ndinit?
The answer to why ours functions different has to be in there..
Got it. Research indicates the hijack.zip is cm teams answer to keeping the boot image seperate for device which need 2nd-init it is just the boot filesystem should be similar to the files i posted earlier except for a specific device. The Question i am asking is since 2ndinit is up why not parse those from elsewhere, the nameless series roms limited implementation threw them in /system/etc/rootfs why not pickup from there.. or are you intent with trying to make an official port? Does cm maintain the source for the 2ndinit on supported hardware? If so diffing those to the source for ours should put us in a solid direction as far as a cm port goes...
And for anyone that doesnt know where im coming from im a long time linux dev, but fairly new to android and this is my first android device so be nice
2nd init is maintained for supported devices. As for contacting revnumbers... I already was in contact with him lol. I worked with him on the D2G for a lot of things. Really our best contact would be to see if CVPCS can figure out what we need to do exactly. All we need to do is expand that task set but I myself am not sure how it works just yet. If you look in that shell script it calls on the task set and copies init.rc into /system/etc/rootfs. Seems like we need to make ALL of the files for our hijack zip copy into there. Right now the atrix ramdisk should be enough to boot at least. We just need to get it loaded lol. Oh and I don't think CM team actually maintains the Hijack zips, I think they pull it from a seperate repo. But it is maintained for supported devices.
aceoyame said:
2nd init is maintained for supported devices. As for contacting revnumbers... I already was in contact with him lol. I worked with him on the D2G for a lot of things. Really our best contact would be to see if CVPCS can figure out what we need to do exactly. All we need to do is expand that task set but I myself am not sure how it works just yet. If you look in that shell script it calls on the task set and copies init.rc into /system/etc/rootfs. Seems like we need to make ALL of the files for our hijack zip copy into there. Right now the atrix ramdisk should be enough to boot at least. We just need to get it loaded lol. Oh and I don't think CM team actually maintains the Hijack zips, I think they pull it from a seperate repo. But it is maintained for supported devices.
Click to expand...
Click to collapse
Nathan,
CVPCS is on Twitter. I've found that to be the best stream to contact him from. He seems to be pretty responsive. Although, he hasn't posted anything in like 5 days. He seems to have dropped off the face of the earth.
I asked on IRC in #koush and this might be helpful:
(11:30:47 PM) CEnnis91: the only thing i would have to guess is that you're not starting a service that draws the screen
Click to expand...
Click to collapse
Also here is our init.rc uploaded in pastebin, with syntax highlighting. Perhaps it will be helpful, if indeed there is a service that needs to be started, it would probably be in one of these files:
init.rc: http://pastebin.com/kRmnArby
init.mapphone_cdma.rc: http://pastebin.com/qrBpqxGq
init.mapphone_umts.rc: http://pastebin.com/kRmnArby
Btw links #1 and #3 are the same.
I'd like to take a look at several files / outputs from the X2:
Files needed:
/init.rc (or fixed link above)
And the ouput of these adb / terminal commands:
cat /proc/mounts
cat /proc/partitions
cat /proc/cmdline
busybox df
Code:
$ cat /proc/mounts
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
/dev/block/mmcblk0p12 /system ext3 ro,noatime,nodiratime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p16 /data ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p15 /cache ext3 rw,nosuid,nodev,noatime,nodiratime,errors=continue,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p3 /pds ext3 rw,nosuid,noexec,relatime,data=ordered 0 0
/dev/block/mmcblk0p17 /preinstall ext3 ro,nosuid,nodev,noatime,nodiratime,data=ordered 0 0
/dev/block/vold/179:33 /mnt/sdcard-ext vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/mnt/sdcard-ext /mnt/sdcard-ext ecryptfs rw,dirsync,nosuid,nodev,noexec,relatime,ecryptfs_sig=36933d94cc9c5e9b,ecryptfs_cipher=aes,ecryptfs_key_bytes=32,ecryptfs_passthrough,no_new_encrypted 0 0
/dev/block/vold/179:18 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/vold/179:18 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/mnt/sdcard /mnt/sdcard ecryptfs rw,dirsync,nosuid,nodev,noexec,relatime,ecryptfs_sig=36933d94cc9c5e9b,ecryptfs_cipher=aes,ecryptfs_key_bytes=32,ecryptfs_passthrough,no_new_encrypted 0 0
Code:
$ cat /proc/partitions
major minor #blocks name
179 0 7747072 mmcblk0
179 1 3584 mmcblk0p1
179 2 512 mmcblk0p2
179 3 2048 mmcblk0p3
179 4 1 mmcblk0p4
179 5 1024 mmcblk0p5
179 6 512 mmcblk0p6
179 7 512 mmcblk0p7
179 8 1024 mmcblk0p8
179 9 2048 mmcblk0p9
179 10 8192 mmcblk0p10
179 11 8192 mmcblk0p11
179 12 460800 mmcblk0p12
179 13 512 mmcblk0p13
179 14 20480 mmcblk0p14
179 15 315392 mmcblk0p15
179 16 2097152 mmcblk0p16
179 17 307200 mmcblk0p17
179 18 4516864 mmcblk0p18
179 32 15558144 mmcblk1
179 33 15554048 mmcblk1p1
Code:
# cat /proc/cmdline
[email protected] [email protected] vmalloc=224M video=tegrafb console=null usbcore.old_scheme_first=1 tegraboot=sdmmc tegrapart=mbr:1100:100:800,kpanic:2500:400:800 security=tomoyo mot_prod=1 androidboot.serialno=TA05406FDO
Code:
# busybox df
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 206888 56 206832 0% /dev
tmpfs 206888 0 206888 0% /mnt/asec
tmpfs 206888 0 206888 0% /mnt/obb
/dev/block/mmcblk0p12
458562 201471 257091 44% /system
/dev/block/mmcblk0p16
2064204 115632 1948572 6% /data
/dev/block/mmcblk0p15
305420 10287 295133 3% /cache
/dev/block/mmcblk0p3 1980 1139 841 58% /pds
/dev/block/mmcblk0p17
305793 130975 174818 43% /preinstall
/dev/block/vold/179:33
15549952 875136 14674816 6% /mnt/sdcard-ext
/mnt/sdcard-ext 15549952 875136 14674816 6% /mnt/sdcard-ext
/dev/block/vold/179:18
4508040 3258836 1249204 72% /mnt/sdcard
/dev/block/vold/179:18
4508040 3258836 1249204 72% /mnt/secure/asec
tmpfs 4508040 3258836 1249204 72% /mnt/sdcard/.android_secure
/mnt/sdcard 4508040 3258836 1249204 72% /mnt/sdcard
init.rc @ http://iswarm.net/init.rc
Hashcode said:
Btw links #1 and #3 are the same.
I'd like to take a look at several files / outputs from the X2:
Files needed:
/init.rc (or fixed link above)
And the ouput of these adb / terminal commands:
cat /proc/mounts
cat /proc/partitions
cat /proc/cmdline
busybox df
Click to expand...
Click to collapse
I have all those files, I had to pull them for CVPCS a while back. How do those help in making 2nd-init work right. I haven't really looked at em so sorry if it's obvious.
Sent from my DROID X2 using XDA App
Here is a PM I had from dragonzkiller about a week ago.
Hey, I've appeared to lost my old 2nd-init for CM7. I think that I may actually be able to find it later. I know that you can use mot_boot_mode. Basically if you look at the C code for the hijack that is used for the other motorola devices for CM7 it's really close, but I used a shell script instead. These are the thing that have to happen:
1.Remount the rootfs and system directories as rw
2.rename adbd to adbd.old in /sbin
3.setprop ctl.stop runtime
4.setprop ctl.stop zygote
5.setprop persist.service.adb.enable 1 (this might not work, but I have a new method that actually starts it)
6.mkdir /preinstall
7.mount -t ext3 /dev/block/mmcblk0p17 /preinstall
8./preinstall/update-binary 2 0 NAMEANDPATHOFUPDATE.zip
9.cp -f /NEWROOTPATHFROMUPDATEZIP/* / (CM7 creates a directory named /newboot and all those files will get copied to the rootfs)
10.run the hijack.killall script from the CM7 hijack. (NOTE: you must remove all the references to hijack because we're not using the standard method. just use the regular ones and you'll be fine)
11./sbin/taskset -p -c 0 1 (taskset can be in you update zip)
12./sbin/taskset -c 0 /sbin/2nd-init (this should stop 2nd-init and restart with a new init.rc that you created and copied overy after using the update zip)
Here is the way I edited my script, going to test it in a bit here.
#!/system/bin/sh
PATH=/system/xbin:/system/bin
mount -o remount,rw rootfs /
mount -o remount,rw /system
rename /sbin/adb /sbin/adb.old
setprop ctl.stop runtime
setprop ctl.stop zygote
setprop persist.service.adb.enable 1
mkdir /preinstall
mount -t ext3 /dev/block/mmcblk0p17 /preinstall
/preinstall/update-binary 2 0 /system/etc/hijack-boot.zip
cp -f /newboot/* /
/sbin/hijack.killall
/sbin taskset -p -c 0 1
sbin/taskset -c 0 /sbin/2nd-init
I think your looking for 'mv' not 'rename' ..
Can you link me to where you got your implementation of 2nd init, so i can play as well...
How would mv rename it? I didnt get that part, but rename should work I would imagine.
My system doesnt respond to rename mv is the linux equivalent you 'move' the file to a new name, mv oldfile.txt newfile.txt ..
# cd tbin
# ls
mount.sh
unmount.sh
mrw
mro
# rename mro mrx
rename: not found
# mv mro mrx
# ls
mount.sh
unmount.sh
mrw
mrx
#
Click to expand...
Click to collapse
Related
I'm running 2.03 and my browser started crashing so I did a reboot. Now I keep looping between the ViewSonic screen and gtablet screen. I've tried several restores through ClockWorkMod and it still doesn't work. I thought I could try to do the upgrade.zip off of a sd card but how do I get the system to recongize it and not the internal memory?
Stupid question : Have you done a user data wipe/system data wipe from CW?
If cw is not seeing the internal sd and the updates located on the internal sd are not working with full users data wipe, then a nvflash push from pc will have to be done to vanilla tnt, then do an update to get clockwork back, then tnt lite 2.0 with clockwork?
You might need to do a re-partition of your SD card (or rather, of the internal SD card memory) from clockwork mod. That has gotten other people out of a boot loop. This most likely has something to do with partitions getting corrupted, which seems to occasionally happen when you are flashing ROMs. You might want to search the forum for SD card partition and boot loop, I know several people have had the same issue.
There is also the APX mode as a backup mechanism if that fails. Search forum for that one too - it's basically a backup to the normal CW or other recovery that lets you flash a fresh ROM even if all else has failed. But I don't think you need to go there if your recovery is still working fine.
arrow21 said:
Stupid question : Have you done a user data wipe/system data wipe from CW?
Click to expand...
Click to collapse
Yes, tried nearly everything I can in Clock and nothing changes the loop. I thought in the worst case you could always find a way to get the system back to it's original state but no luck so far.
another option is this
http://forum.xda-developers.com/showpost.php?p=9439414&postcount=7
I have never done the partiton of my sdcard... so I guess that might work also.
arrow21 said:
another option is this
http://forum.xda-developers.com/showpost.php?p=9439414&postcount=7
I have never done the partition of my sdcard... so I guess that might work also.
Click to expand...
Click to collapse
HELP!!! I think my data partition just go hosed, all I tried to do was restore a backup since I was getting a lot of FC, all trying to access my data folder according to logcat....what do I do, will redoing the partition of my sdcard fix the errors below. How do I repartition and what settings do I use? I was trying to do the restore since I too got stuck in reboot loop. I have the logcat ouput if any dev is interested in seeing it.
Trying to restore backup in clockworkmod I get this:
ClockworkMod Recovery v2.5.1.1-bekit-0.8
Checking MD5 sums...
Erasing boot before restore
Restoring system...
Restoring data...
E:Can't mount /dev/block/mmcblk3p2
(Invalid argument)
Error mounting /data/!
Skipping format...
E:Can't mount /dev/block/mmcblk3p2
(Invalid argument)
Can't mount /data/!
rcgabriel said:
You might need to do a re-partition of your SD card (or rather, of the internal SD card memory) from clockwork mod. That has gotten other people out of a boot loop. This most likely has something to do with partitions getting corrupted, which seems to occasionally happen when you are flashing ROMs. You might want to search the forum for SD card partition and boot loop, I know several people have had the same issue.
There is also the APX mode as a backup mechanism if that fails. Search forum for that one too - it's basically a backup to the normal CW or other recovery that lets you flash a fresh ROM even if all else has failed. But I don't think you need to go there if your recovery is still working fine.
Click to expand...
Click to collapse
rc, thanks for the help. Honestly partitioning is something I've never fully understood so I wasn't even sure how to do that. I went into CW and then advanced settings and chose to partition the sd card. The only problem is I didn't know what settings to use so I just used the first ones to pop up. After doing that I did a reboot and things worked fine.
I was going to go back and try a CW restore and see if I could get everything back but now it can't find the restore file. I assume that happened when I tried to reformat the card.
scmobileman said:
I was going to go back and try a CW restore and see if I could get everything back but now it can't find the restore file. I assume that happened when I tried to reformat the card.
Click to expand...
Click to collapse
The restore files were are stored on the internal sdcard, so when you formatted, you wiped them out...is my guess. You could have used adb to save them off before hand and then put them back after format.
For the benefit of others, here is how I fixed this:
-Boot into clockworkmod
-Used adb to copy off all sdcard files (including backup files to use in restore)
-Use CW to partition the sdcard (2048mb ext, 256mb swap)
-Tried to copy backup files back...see issues below
-Restore backup files
-Back to working tab
Two issues I had, one is that for the life of me, I could not get the backup files back onto the sdcard. adb must not like windows because it had issues copying the files back unless you copy them to the root of the device. Even then I tried to shell into the device and move the files to the sdcard, but then CW would not see the files, when I reboot the device and try again, the files were gone. I tried to just copy the update.zip file, again CW didn't see the file, and reboot caused it to disappear as well. I managed to mount the tab in USB mode and copy the files to the sdcard using windows. Afterwards CW didn't see the files either.
I figured the system image was good, rebooted to start from scratch, and the setup program ran. I tried to tap the screen bu nothing would happen. Issue two from the log, is that it the setup wizard ignores touch evens if there is no phone interface...reboot again, back into CW, and this time it saw my backup files, restore, then good to go.
My next step would have been to delete the setupwizard apk, wipe data, boot into android, copy backup files, reboot, restore, but not needed finally.
Have other people run into the above issue where you copy files to the sdcard uin adb while within CW, and the files don't stick. How do you get around this?
raydog.. thank you thank you thank you
thanks
raydog, your post helped greatly. thank you.
Life in LA said:
raydog, your post helped greatly. thank you.
Click to expand...
Click to collapse
Thanks, sad to say I am back in a reboot loop, so I have to do this all over again...uggg
I have shut my tablet off by holding down the power button and bypassing the shutdown screen, wonder if this corrupted the data partition.
I had the reboot problem when trying to load 2.0.0
My fix: Loaded original vanilla via sdcard (took two load tries) then retried 2.0.0 via sdcard and it worked.
please help to make my data read write
raydog153 said:
Have other people run into the above issue where you copy files to the sdcard uin adb while within CW, and the files don't stick. How do you get around this?
Click to expand...
Click to collapse
1|[email protected]:/sbin # su
[email protected]:/sbin # is
sh: is: not found
127|[email protected]:/sbin # cat /proc/mounts
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
none /sys/fs/cgroup tmpfs rw,seclabel,relatime,mode=750,gid=1000 0 0
tmpfs /mnt/asec tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/FACTORYFS /system ext4 ro,seclabel,relatime,user_xattr,barrier=1,data=ordered 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/EFS /efs ext4 rw,seclabel,nosuid,nodev,relatime,user_xattr,barrier=1,data=ordered 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/DATAFS /data ext4 ro,seclabel,nosuid,nodev,noatime,user_xattr,barrier=1,journal_async_commit,data=ordered,noauto_da_alloc,discard 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/CACHE /cache ext4 rw,seclabel,nosuid,nodev,noatime,user_xattr,barrier=1,journal_async_commit,data=ordered,noauto_da_alloc,discard 0 0
/sys/kernel/debug /sys/kernel/debug debugfs rw,relatime 0 0
/dev/fuse /mnt/shell/emulated fuse rw,nosuid,nodev,noexec,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
[email protected]:/sbin # mount
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
none /sys/fs/cgroup tmpfs rw,seclabel,relatime,mode=750,gid=1000 0 0
tmpfs /mnt/asec tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/FACTORYFS /system ext4 ro,seclabel,relatime,user_xattr,barrier=1,data=ordered 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/EFS /efs ext4 rw,seclabel,nosuid,nodev,relatime,user_xattr,barrier=1,data=ordered 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/DATAFS /data ext4 ro,seclabel,nosuid,nodev,noatime,user_xattr,barrier=1,journal_async_commit,data=ordered,noauto_da_alloc,discard 0 0
/dev/block/platform/omap/omap_hsmmc.1/by-name/CACHE /cache ext4 rw,seclabel,nosuid,nodev,noatime,user_xattr,barrier=1,journal_async_commit,data=ordered,noauto_da_alloc,discard 0 0
/sys/kernel/debug /sys/kernel/debug debugfs rw,relatime 0 0
/dev/fuse /mnt/shell/emulated fuse rw,nosuid,nodev,noexec,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
[email protected]:/sbin # fs
sh: fs: not found
127|[email protected]:/sbin # df
Filesystem Size Used Free Blksize
/dev 407.7M 32.0K 407.6M 4096
/sys/fs/cgroup 407.7M 12.0K 407.7M 4096
/mnt/asec 407.7M 0.0K 407.7M 4096
/mnt/obb 407.7M 0.0K 407.7M 4096
/system 1.3G 443.6M 934.3M 4096
/efs 19.7M 8.1M 11.5M 4096
/data 11.9G 5.5G 6.3G 4096
/cache 689.0M 129.8M 559.1M 4096
/mnt/shell/emulated 11.9G 5.5G 6.3G 4096
[email protected]:/sbin # cat /proc/partitions
major minor #blocks name
179 0 15388672 mmcblk0
179 1 20480 mmcblk0p1
179 2 2048 mmcblk0p2
179 3 2048 mmcblk0p3
179 4 8192 mmcblk0p4
179 5 8192 mmcblk0p5
179 6 8192 mmcblk0p6
179 7 716800 mmcblk0p7
259 0 20480 mmcblk0p8
259 1 1433600 mmcblk0p9
259 2 12640239 mmcblk0p10
259 3 524288 mmcblk0p11
179 16 2048 mmcblk0boot1
179 8 2048 mmcblk0boot0
[email protected]:/sbin # format 259
sh: format: not found
127|[email protected]:/sbin # del
sh: del: not found
127|[email protected]:/sbin # mount /efs rw
Usage: mount [-r] [-w] [-o options] [-t type] device directory
1|[email protected]:/sbin # mount -o rw,remount /efs
[email protected]:/sbin # mount -o rw,remount /dev
[email protected]:/sbin # mount -o rw,remount /sys/fs/cgroup
[email protected]:/sbin # mount -o rw,remount /mnt/asec
[email protected]:/sbin # mount -o rw,remount /mnt/obb
[email protected]:/sbin # mount -o rw,remount /system
[email protected]:/sbin # mount -o rw,remount /syste
Usage: mount [-r] [-w] [-o options] [-t type] device directory
1|[email protected]:/sbin # mount -o rw,remount /efs
[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin # mount -o rw,remount /cache
[email protected]:/sbin # mount -o rw,remount /mnt/shell/emulated
[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin # mount -o rw
Usage: mount [-r] [-w] [-o options] [-t type] device directory
1|[email protected]:/sbin # mount -o rw, del /data
Usage: mount [-r] [-w] [-o options] [-t type] device directory
1|[email protected]:/sbin # mount -o rw,del /data
Usage: mount [-r] [-w] [-o options] [-t type] device directory
1|[email protected]:/sbin # help
sh: help: not found
127|[email protected]:/sbin # Read-only file system
sh: Read-only: not found
127|[email protected]:/sbin # rw
sh: rw: not found
127|[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin # mount -o rw,remount /data
mount: Read-only file system
255|[email protected]:/sbin #
this is my partition table and errors for p3100.
please help me how to make it read write.
please mailm e the steps.
[email protected]
thanks in advance
Anybody with a Sony Tablet S, a few minutes to spare, and some basic ADB knowledge, can you please run the following command for me?
Code:
adb shell mount > sony-tablet-s-mounts.txt
Then simply upload the text file called sony-tablet-s-mounts.txt that is in your adb tools folder or whatever directory you ran that command from.
Also please run.
Code:
adb shell cat /proc/mounts/ > sony-tablet-s-proc-mounts.txt
Then again upload that file that was outputted.
Here we go:
mount
Code:
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
/dev/block/mmcblk0p1 /configs ext2 ro,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mmcblk0p3 /system ext4 ro,relatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p10 /data ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p4 /cache ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p9 /log ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/svold/179:17 /mnt/sdcard2 vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/vold/179:11 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/vold/179:11 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/dm-0 /mnt/asec/com.bbb.btr-1 vfat ro,dirsync,nosuid,nodev,relatime,uid=1000,fmask=0222,dmask=0222,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/dm-1 /mnt/asec/com.polarbit.rthunderlite-1 vfat ro,dirsync,nosuid,nodev,relatime,uid=1000,fmask=0222,dmask=0222,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
proc/mounts
Code:
rootfs / rootfs ro,relatime 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
/dev/block/mmcblk0p1 /configs ext2 ro,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
/dev/block/mmcblk0p3 /system ext4 ro,relatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p10 /data ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p4 /cache ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/mmcblk0p9 /log ext4 rw,nosuid,nodev,noatime,barrier=1,data=ordered 0 0
/dev/block/svold/179:17 /mnt/sdcard2 vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/vold/179:11 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/vold/179:11 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/dm-0 /mnt/asec/com.bbb.btr-1 vfat ro,dirsync,nosuid,nodev,relatime,uid=1000,fmask=0222,dmask=0222,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
/dev/block/dm-1 /mnt/asec/com.polarbit.rthunderlite-1 vfat ro,dirsync,nosuid,nodev,relatime,uid=1000,fmask=0222,dmask=0222,codepage=cp437,iocharset=iso8859-1,shortname=mixed,batch_sync,utf8,comp_uni,avoid_dlink,errors=remount-ro 0 0
Anything else?
Also tried proc/mtd but that had no output.
Sent from my Sony Tablet S using Tapatalk
manually push busybox to /data/tmp/local/ and try to remount /system as RW
then try to push su binary to /system/bin/ (give it permission 06755)
then try to push Superuser.apk to /system/app/
btw does this tablet have some sort of recovery mode? what abt bootloader status?
Code:
[email protected] ~/data/Android/exploits $ adb push busybox /data/tmp/local/
failed to copy 'busybox' to '/data/tmp/local/': No such file or directory
[email protected] ~/data/Android/exploits $ adb push busybox /data/local/
1322 KB/s (1062992 bytes in 0.784s)
[email protected] ~/data/Android/exploits $ adb shell
$ chmod 777 /data/local/busybox
$ /data/local/busybox su
su: must be suid to work properly
$ /data/local/busybox sulogin
sulogin: no password entry for root
$ /data/local/busybox mount -o remount,rw -t yaffs2 /dev/block/mmcblk0p3 /system
mount: permission denied (are you root?)
$ mount -o remount,rw -t yaffs2 /dev/block/mmcblk0p3 /system
mount: Operation not permitted
$ /data/local/busybox whoami
whoami: unknown uid 2000
So... stuck at remounting with rw permissions. no permissions
There is a recovery mode (power + volume-up key at boot).
abt bootloader status? Don't know what that is, and how to check.
Elkan85 said:
Code:
[email protected] ~/data/Android/exploits $ adb push busybox /data/tmp/local/
failed to copy 'busybox' to '/data/tmp/local/': No such file or directory
[email protected] ~/data/Android/exploits $ adb push busybox /data/local/
1322 KB/s (1062992 bytes in 0.784s)
[email protected] ~/data/Android/exploits $ adb shell
$ chmod 777 /data/local/busybox
$ /data/local/busybox su
su: must be suid to work properly
$ /data/local/busybox sulogin
sulogin: no password entry for root
$ /data/local/busybox mount -o remount,rw -t yaffs2 /dev/block/mmcblk0p3 /system
mount: permission denied (are you root?)
$ mount -o remount,rw -t yaffs2 /dev/block/mmcblk0p3 /system
mount: Operation not permitted
$ /data/local/busybox whoami
whoami: unknown uid 2000
So... stuck at remounting with rw permissions. no permissions
There is a recovery mode (power + volume-up key at boot).
abt bootloader status? Don't know what that is, and how to check.
Click to expand...
Click to collapse
why are u remounting as yaffs2?
just use:
Code:
busybox mount -o remount, rw /system
is adb active in recovery? if yes then try pushing su/busybox when in recovery mode...
ADB ain't active in recovery mode.
in fact we only have 3 choices in recovery mode:
- reboot
- update from sd-card
- return to factory settings
try to find a fastboot bin for linux, maybe can use it to
fastboot into bootloader(?)
Code:
$$ /data/local/busybox mount -o remount, rw /system
mount: permission denied (are you root?)
$$ mount -o remount, rw /system
mount: Operation not permitted
Elkan85 said:
ADB ain't active in recovery mode.
in fact we only have 3 choices in recovery mode:
- reboot
- update from sd-card
- return to factory settings
try to find a fastboot bin for linux, maybe can use it to
fastboot into bootloader(?)
Code:
$$ /data/local/busybox mount -o remount, rw /system
mount: permission denied (are you root?)
$$ mount -o remount, rw /system
mount: Operation not permitted
Click to expand...
Click to collapse
There should be generic update.zip to flash via recovery for SU. Try if that works
Sent from my GT-I9100 using XDA App
DooMLoRD said:
There should be generic update.zip to flash via recovery for SU. Try if that works
Sent from my GT-I9100 using XDA App
Click to expand...
Click to collapse
found some...
But with all i get:
signature verification failed
anyway to avoid that?
Posted on the sony forum a request for the original update.zip
hope i can get something...
hi
i cant see anyway to go in fastboot.
boot with vol+ there are stop in the stock recovery "Android system recovery <Rev.7 <3e>"
3 Option in recovery:
1. cancel ans restart device
2. Update system from sd card.
3. Reset to factory setting
But with sdcard update there comes E:signature verfication fail i try this file http://forum.xda-developers.com/showthread.php?t=1288348
adb works with debugging is enable, but the remount of the /system dosnt work.
how we become root ?
The Sony Tablet has a 3e recovery, isn't this the same issue as with this >> http://forum.xda-developers.com/showthread.php?t=833423
here some infos
Code:
cat /proc/partitions
major minor #blocks name
179 0 15629312 mmcblk0
179 1 2048 mmcblk0p1
179 2 393216 mmcblk0p2
179 3 393216 mmcblk0p3
179 4 524288 mmcblk0p4
179 5 2048 mmcblk0p5
179 6 49152 mmcblk0p6
179 7 1024 mmcblk0p7
179 8 393216 mmcblk0p8
179 9 16384 mmcblk0p9
179 10 4194304 mmcblk0p10
179 11 9368576 mmcblk0p11
179 16 31702016 mmcblk1
179 17 31697920 mmcblk1p1
$
edit: add dmesg.txt
is there any way to make temporary root ?
jhepoy said:
The Sony Tablet has a 3e recovery, isn't this the same issue as with this >> http://forum.xda-developers.com/showthread.php?t=833423
Click to expand...
Click to collapse
Tried that, this aint gonna work because it try to mount /system rw.
Sent from my Sony Tablet S using Tapatalk
Elkan85 said:
Tried that, this aint gonna work because it try to mount /system rw.
Click to expand...
Click to collapse
You have /system in rw ? then you can make root.
PeterPan6754 said:
You have /system in rw ? then you can make root.
Click to expand...
Click to collapse
I wish i had rw in /system..
Still trying to exploit this ****..
Elkan85 said:
I wish i had rw in /system..
Still trying to exploit this ****..
Click to expand...
Click to collapse
hello
have you make chances in the instal.lbat file ?
and use the su from the honeycomb superuser files ?
im not at home and cant test it.
Code:
ECHO Installing modified recovery
%adb% start-server >nul
%adb% -d wait-for-device >nul
%adb% -d shell mount -o rw,remount /dev/block/mmcblk0p3 /system
%adb% -d push %su% /system/bin/su
%adb% -d shell chmod 06755 /system/xbin/su
GOTO :finished
Thanks for trying so hard guys, if you can crack this and bring root to the tablet s you will be legends. I will happily donate via paypal as a thank you.
PeterPan6754 said:
hello
have you make chances in the instal.lbat file ?
and use the su from the honeycomb superuser files ?
im not at home and cant test it.
Code:
ECHO Installing modified recovery
%adb% start-server >nul
%adb% -d wait-for-device >nul
%adb% -d shell mount -o rw,remount /dev/block/mmcblk0p3 /system
%adb% -d push %su% /system/bin/su
%adb% -d shell chmod 06755 /system/xbin/su
GOTO :finished
Click to expand...
Click to collapse
That doesn't work either..
Because we have no mountain permissions..
Sent from my HTC Desire using XDA App
Elkan85 said:
That doesn't work either..
Because we have no mountain permissions..
Sent from my HTC Desire using XDA App
Click to expand...
Click to collapse
yes it dosnt work
Getting temporary root.
> Starting adb server: Success
Checking for temporary root.
Installing rageagainstthecage.
> Uploading rageagainstthecage: Success
> chmod rageagainstthecage: Success
> Running rageagainstthecage: Success
Checking for temporary root.
> Stopping adb server: Success
> Starting adb server: Success
> Checking for root: Error: timed out
temp root failed! install cannot continue.
Click to expand...
Click to collapse
Update:
I've successfully compiled CWM Recovery for my device. If anyone is inquiring on how PM and I will create a post for it. Because of the lack of support getting to that point I will hold on to it for now.
Now that I've compiled this I really dont know what do next.
---------------------
So I've spent a majority of the day looking at this device (hipstreet flare HS-9DTB4-8GB).
What I'd like to do is compile my own ClockworkMod for this device.
I've spend most of the day working on discovering where everything is and backing up everything using ADB.
Information From Device
Current Rom: Softwinerf900_V1.1.7_20121225r587_27d8028 (Found in Current Chinese Recovery, Option 2, Displayed in Center)
Model-Number: HS-9DTB4
Android version: 4.0.4
Baseband version: 1.4rc3
Kernel version: 3.0.8+ (Tue Dec 25 18:20:41 CST 2012)
Build number: 20130118 F900
Memory: 353MB (Supposed to be 512 and is but I've read there is issues with kernel support.)
Processor: ARMv7 Proccessor rev 2 (v71) 1200MHz
Partition Layout and Confirmed Partitions
cat /proc/partitions
major minor #blocks name
Code:
93 0 16384 nanda bootloader
93 8 16384 nandb
93 16 32768 nandc
93 24 393216 nandd system
93 32 1048576 nande data
93 40 16384 nandf
93 48 32768 nandg
93 56 262144 nandh
93 64 131072 nandi
93 72 16384 nandj
93 80 5799936 nandk sdcard (Mounted by vold as /mnt/sdcard and /mnt/secure/asec)
Partition Layout from what I can see follows Allwinner as described in second table on this site:
http://linux-sunxi.org/Android/partitions
Code:
[email protected]:/ # mount
mount
rootfs / rootfs rw 0 0
tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600,ptmxmode=000 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
/dev/block/nandd /system ext4 rw,nodev,noatime,user_xattr,barrier=0,data=ordered 0 0
/dev/block/nande /data ext4 rw,nosuid,nodev,noatime,user_xattr,barrier=0,journal_checksum,data=ordered,noauto_da_alloc 0 0
/dev/block/nandh /cache ext4 rw,nosuid,nodev,noatime,user_xattr,barrier=0,journal_checksum,data=ordered,noauto_da_alloc 0 0
/dev/block/vold/93:80 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0000,dmask=0000,allow_utime=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/vold/93:80 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0000,dmask=0000,allow_utime=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0 tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/dm-0 /mnt/asec/com.quoord.tapatalkxda.activity-1 vfat ro,dirsync,nosuid,nodev,relatime,uid=1000,fmask=0000,dmask=0000,allow_utime=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro 0 0
I've backed up nanda, nandb, nandc, nandd, nandg just incase with ADB.
(If anyone would like them I have no issue with sharing. Only thing I've done so far is added ROOT and fixed Keyboard issue, which both can be reversed.)
Like I said, what I'd like to do is Compile CWM for this device. I'm currently setting up Ubuntu as a dual boot so I can do this.
My question is what exactly do I need to do to do this. I understand there are many guides on the steps envolved to do this but if someone could provide the links that are rather structured. Also I'd be interested in working on taking this to the next step to work on making a rom for this.
Update: Stage One
I'm currently following mithun46 guide to build my enviroment (installing linux) I'm installing on a tower that I was using to grow my dust farm...
Now when I get to:
Code:
repo init -u git://github.com/CyanogenMod/android.git -b jellybean
What should I actually be using so I can build CWM Recovery?
CWM for Hipstreet
I have the same tablet as you Hispstreet Flare 9" ics 4.0 ...... I would love to be able to flash the CWM recovery to my device and thus be able to install custom rom ...could you please help me out
Thanks its would be much appreciated
Did anyone get anywhere with this? Would love a simple way to root and install custom rom on this. Launchers just don't give me quite the flexibility that I want and it's very laggy when I get too many apps open but hardware specs should allow this to run better. I'm not a dev and knowledge is limited but I can follow steps in order and send feedback if that would help, as long as it's not going to brick it LOL - Hubby would kill me but I am just itching to do more with it.
Lost On Off Switch Function
I was cleaning up some old installs and somehow deleted the file that controls the on off switch. You would not know which file that would be would you? (And where I might find it?)
Regards,
tsb
stock roms
tsbrownie said:
I was cleaning up some old installs and somehow deleted the file that controls the on off switch. You would not know which file that would be would you? (And where I might find it?)
Regards,
tsb
Click to expand...
Click to collapse
Does anyone know where to find stock roms for the hip street devices? Would be greatly appreciated! thanks
Help with stock rom
cr3at1ve said:
Does anyone know where to find stock roms for the hip street devices? Would be greatly appreciated! thanks
Click to expand...
Click to collapse
I have been looking for a stock rom as well as my issue is that it will not boot past the hipstreet flare 2 logo, i'm really not sure what to do now I have tried to contact customer support with no avail.
Any help would be great!!
Thanks in advance
I'm trying to put the SU binary in a different place than the /system folder. I can flash it to /data with the correct permissions, but when I run SU, it doesn't get root.
Code:
[email protected]:/ $ /data/su
/data/su
1|[email protected]:/ $ id
id
uid=2000(shell) gid=2000(shell) groups=1003(graphics),1004(input),1007(log),1009(mount),1011(adb),1015(sdcard_rw),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats)
Is there a reason why it doesn't work in /data/? Is there another folder (not /system/) where it should work?
Code:
ls -la /data/su
-rwsr-sr-x root root 380532 2008-08-01 12:00 su
# From a working /system/su :
-rwsr-sr-x root root 380532 2008-08-01 12:00 su
Has to be in /system. It has elevated privileges that you can't get in the /data partition. Are you unable to put it in /system, as in trying to root a new device, or is there another reason you're against putting it there?
I continued searching myself (like I should) and I just found the answer (sorry, forgot to subscribe to the thread). /data is mounted with "nosuid" option, so privilege elevation isn't possible.
Code:
[email protected]:/ $ cat /proc/self/mountinfo
cat /proc/self/mountinfo
1 1 0:1 / / ro,relatime - rootfs rootfs ro
12 1 0:12 / /dev rw,nosuid,relatime - tmpfs tmpfs rw,mode=755
13 12 0:9 / /dev/pts rw,relatime - devpts devpts rw,mode=600
14 1 0:3 / /proc rw,relatime - proc proc rw
15 1 0:13 / /sys rw,relatime - sysfs sysfs rw
16 15 0:5 / /sys/kernel/debug rw,relatime - debugfs debugfs rw
17 1 0:14 / /acct rw,relatime - cgroup none rw,cpuacct
18 1 0:15 / /mnt/asec rw,relatime - tmpfs tmpfs rw,mode=755,gid=1000
19 1 0:16 / /mnt/obb rw,relatime - tmpfs tmpfs rw,mode=755,gid=1000
20 12 0:17 / /dev/cpuctl rw,relatime - cgroup none rw,cpu
21 1 179:1 / /system ro,relatime - ext4 /dev/block/mmcblk0p1 ro,user_xattr,acl,barrier=1,data=ordered
22 1 179:7 / /data rw,nosuid,nodev,noatime,nodiratime - ext4 /dev/block/mmcblk0p7 rw,errors=panic,user_xattr,acl,barrier=1,nodelalloc,data=ordered
23 1 179:2 / /cache rw,nosuid,nodev,noatime,nodiratime - ext4 /dev/block/mmcblk0p2 rw,errors=panic,user_xattr,acl,barrier=1,nodelalloc,data=ordered
24 1 0:18 / /Removable rw,relatime - tmpfs tmpfs rw,mode=755,gid=1000
25 1 0:19 / /mnt/sdcard rw,nosuid,nodev,relatime - fuse /dev/fuse rw,user_id=1023,group_id=1023,default_permissions,allow_other
26 24 179:9 / /Removable/MicroSD rw,nosuid,nodev,noexec,relatime - vfat /dev/block/vold/179:9 rw,dirsync,uid=1000,gid=1015,fmask=0000,dmask=0000,allow
rtname=mixed,utf8,errors=remount-ro
If I understand this correctly, there's no location (except for /system) that is mounted without the nosuid flag (or at least no location where I can put the SU binary). Is it possible to create a new partition that would also be automatically mounted at startup? Which files should I edit/where should I look for info?
I'm not trying to root a new device. It works perfectly fine in /system/. I want to have root access without it being obvious that it's available.
You can use the option of SuperSU to have no icon or use a launcher that can hide apps, like Nova. Then you would only be able to tell if you were looking under the All Tab in the Application Manager in Settings, or if you have a device like a Samsung where it might show your device status as Custom. If that's the case, I believe there's an Xposed mod to change that to official status.
Sent from my A0001 using XDA Premium 4 mobile app
es0tericcha0s said:
You can use the option of SuperSU to have no icon or use a launcher that can hide apps, like Nova. Then you would only be able to tell if you were looking under the All Tab in the Application Manager in Settings, or if you have a device like a Samsung where it might show your device status as Custom. If that's the case, I believe there's an Xposed mod to change that to official status.
Click to expand...
Click to collapse
No, I'm trying to hide it on a system wide level. I'm doing this for forensics/research purposes. Not for the user, but for apps. For XPosed, there's also RootCloack, but that's lacking in many ways. There are a lot of ways of still detecting root while RoatCloack is installed.
Does anybody know how I can add a partition? I've searched for documentation but so far I've only found information about how to resize partitions.
Dauntless said:
No, I'm trying to hide it on a system wide level. I'm doing this for forensics/research purposes. Not for the user, but for apps. For XPosed, there's also RootCloack, but that's lacking in many ways. There are a lot of ways of still detecting root while RoatCloack is installed.
Does anybody know how I can add a partition? I've searched for documentation but so far I've only found information about how to resize partitions.
Click to expand...
Click to collapse
Messing with that would be a good way to brick the device. I don't believe there would be a way to create a new partition in that manner, and if you could, even less likely it would be able to run su from it. And different manufacturers do their partitions and sometimes even files systems differently. If you could, somehow, get it to work with one phone, it wouldn't be a universal solution.
es0tericcha0s said:
Messing with that would be a good way to brick the device. I don't believe there would be a way to create a new partition in that manner, and if you could, even less likely it would be able to run su from it. And different manufacturers do their partitions and sometimes even files systems differently. If you could, somehow, get it to work with one phone, it wouldn't be a universal solution.
Click to expand...
Click to collapse
Is there a reason why you think it would be impossible to su from it if it's mounted without the nosuid flag?
Maybe a different approach then: Where should I look if I want to mount /data (or any other partition) without the nosuid flag?
It also doesn't have to be a universal solution.
I just don't think it's possible to mount another partition with that flag.
Sent from my A0001 using XDA Premium 4 mobile app
Good news. Root is on the way. I have found an exploit (namely the dirty cow exploit to gain root access), only problem is my root lasts for 1 command and I am trying to work out a way to transfer over the su binary itself. I will update this post once I have more info.
ALSO, AND THIS IS IMPORTANT. IF YOU WANT ROOT, DO NOT UPDATE TO ZV6 WHEN IT DROPS. ZV6 WILL LIKELY PATCH THIS EXPLOIT.
Reserved
Following!
Noticed on another forum, ZV6 has appeared.
I cannot remember if you are given a choice whether to install these or not...turned off wifi/data just in case, lol.
It will download the update, but it won't install without your permission. As an update on root. I have a root shell, but I cannot do anything thanks to SELinux. I need to find an exploit to get around SELinux.
Code:
λ adb -d shell
[email protected]:/ $ run-as exec whoami
Warning: setcon transition to 'u:r:init:s0' failed (is SELinux Enforcing?)
root
[email protected]:/ $ run-as exec dd if=/dev/block/bootdevice/by-name/boot of=/sdcard/boot.img
Warning: setcon transition to 'u:r:init:s0' failed (is SELinux Enforcing?)
dd: /dev/block/bootdevice/by-name/boot: Permission denied
I knew about ZV6 because I saw the kernel sourrces when I went to download the ZV5 source
if this helps........
EagerestWolf said:
Reserved
Click to expand...
Click to collapse
https://mega.nz/#!6BMlmIZB!CBKqxLvGl3c2EfYXj6_hIbdUKxPtbfWzgoglQb0d5aA
thats the ZV5 update for the LGLS775ABB that popped up on my LGLS775ABB ZVZ4!
454.4mb.zip, unzips to 1.02gb..............
If you can get any way to recovery from a predicament out of it, please share!
zach
---------- Post added at 11:16 PM ---------- Previous post was at 11:10 PM ----------
EagerestWolf said:
It will download the update, but it won't install without your permission. As an update on root. I have a root shell, but I cannot do anything thanks to SELinux. I need to find an exploit to get around SELinux.
Code:
λ adb -d shell
[email protected]:/ $ run-as exec whoami
Warning: setcon transition to 'u:r:init:s0' failed (is SELinux Enforcing?)
root
[email protected]:/ $ run-as exec dd if=/dev/block/bootdevice/by-name/boot of=/sdcard/boot.img
Warning: setcon transition to 'u:r:init:s0' failed (is SELinux Enforcing?)
dd: /dev/block/bootdevice/by-name/boot: Permission denied
Click to expand...
Click to collapse
Definitely no dev here, but using a selenix mode changer app, in 5.1.1, linking su binaries from su/bin to system/xbin allowed it to set selenix to permissice on the Samsung Galaxy J3 (2016) SM-J320P until we got a permissive kernel. That phone has one messed up os hyrbid odex & deodex mix..............
zach...........
---------- Post added at 11:21 PM ---------- Previous post was at 11:16 PM ----------
EagerestWolf said:
I knew about ZV6 because I saw the kernel sourrces when I went to download the ZV5 source
Click to expand...
Click to collapse
If your kdz's available you can't be talking about the BOOST Mobile Stylo 2........... only one LG's not coughing up software for........ oh well, damn, thought I had found something going somewhere for this device..............
Yes that link above is for BOOST LG Stylo 2! The update was waiting right out of the box, it was already on ZV4 so factory reset hooked it up immediately and run a log cat until it acquired the update again. Then spent about 20 minutes going through all the https links until finding the one the update was coming from and downloaded to the Windows machine.
zach
If you go to LG's Open Source Website. They have all the kernel sources there. ZV6 is listed so it's coming. As for your update package, I looked and I wasn't sure if I saw a recovery image, but I did see a LAF image, which is also helpful.
As for bypassing SELinux, I have a few leads on that one. Once we have root, we will have recovery and ROM's, but we need root first to fix fastboot.
I am actually going to try injecting a modified kernel into your update an flashing it. Since this is an official FOTA. It may work.
!!!!!!!
EagerestWolf said:
I am actually going to try injecting a modified kernel into your update an flashing it. Since this is an official FOTA. It may work.
Click to expand...
Click to collapse
Coolbeans!!! Its signed, can't remember the name but do remember seeing the signature verification. I used winrar so nothing should be messed up with it as well.
Any help, anything, just let me know! I cannot understand why another excellent phone for this price is drifting str8 past any development. Went to Asus after I first got into modding and my HTC burnt..... left them due to their never unlocking bootloaders, etc.... Samsung next, the J3, one messed up piece of os there but we modded the hell out of it, now LG............ every variant of this device has the kdz available if I'm not mistaken. If temp root had to be forced onto this phone, to dd it it would just about be worth the $119 it cost me!
zach
TWRP
EagerestWolf said:
I am actually going to try injecting a modified kernel into your update an flashing it. Since this is an official FOTA. It may work.
Click to expand...
Click to collapse
terminal:
cat /proc/cmdline
trying to get kernel cmd line
& arguments
also stock boot.img
but keep getting perm denied
Can you get any of this so TWRP can be ported?
The person who did TWRP for the Stylo 2 + says he can port TWRP for Stylo 2 LGLS775ABB (my device) if whats listed above can be provided.
Any ideas?
That won't work, we need root, and before we can do anything related to TWRP, we need fastboot, so this is all in vain.
Sent from my LGLS775 using Tapatalk
coolbeans2016 said:
terminal:
cat /proc/cmdline
trying to get kernel cmd line
& arguments
also stock boot.img
but keep getting perm denied
Can you get any of this so TWRP can be ported?
The person who did TWRP for the Stylo 2 + says he can port TWRP for Stylo 2 LGLS775ABB (my device) if whats listed above can be provided.
Any ideas?
Click to expand...
Click to collapse
I can provide a stock boot.img I have for LS775 ZV5 build, but cat /proc/cmline is useless right now. I do get some output with cat /proc/partitions and cat /proc/mounts
Code:
major minor #blocks name
253 0 485204 zram0
179 0 15388672 mmcblk0
179 1 512 mmcblk0p1
179 2 512 mmcblk0p2
179 3 512 mmcblk0p3
179 4 512 mmcblk0p4
179 5 2048 mmcblk0p5
179 6 1536 mmcblk0p6
179 7 512 mmcblk0p7
179 8 512 mmcblk0p8
179 9 512 mmcblk0p9
179 10 512 mmcblk0p10
179 11 2048 mmcblk0p11
179 12 16384 mmcblk0p12
179 13 16384 mmcblk0p13
179 14 512 mmcblk0p14
179 15 1536 mmcblk0p15
179 16 1536 mmcblk0p16
179 17 24576 mmcblk0p17
179 18 24576 mmcblk0p18
179 19 24576 mmcblk0p19
179 20 24576 mmcblk0p20
179 21 1536 mmcblk0p21
179 22 512 mmcblk0p22
179 23 512 mmcblk0p23
179 24 512 mmcblk0p24
179 25 512 mmcblk0p25
179 26 512 mmcblk0p26
179 27 512 mmcblk0p27
179 28 512 mmcblk0p28
179 29 8192 mmcblk0p29
179 30 32768 mmcblk0p30
179 31 10240 mmcblk0p31
259 0 8192 mmcblk0p32
259 1 8192 mmcblk0p33
259 2 65536 mmcblk0p34
259 3 1024 mmcblk0p35
259 4 2560 mmcblk0p36
259 5 2048 mmcblk0p37
259 6 6144 mmcblk0p38
259 7 40960 mmcblk0p39
259 8 3207168 mmcblk0p40
259 9 921600 mmcblk0p41
259 10 10915840 mmcblk0p42
259 11 8175 mmcblk0p43
179 32 4096 mmcblk0rpmb
Code:
rootfs / rootfs ro,seclabel,relatime 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
none /acct cgroup rw,relatime,cpuacct 0 0
none /sys/fs/cgroup tmpfs rw,seclabel,relatime,mode=750,gid=1000 0 0
tmpfs /mnt tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
none /dev/cpuctl cgroup rw,relatime,cpu 0 0
pstore /sys/fs/pstore pstore rw,relatime 0 0
/dev/pstore /dev/pstore pstore rw,relatime 0 0
adb /dev/usb-ffs/adb functionfs rw,relatime 0 0
/dev/block/bootdevice/by-name/system /system ext4 ro,seclabel,noatime,data=ordered 0 0
/dev/block/bootdevice/by-name/cache /cache ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/userdata /data ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,resuid=1000,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/persist /persist ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/modem /firmware vfat ro,context=u:object_r:firmware_file:s0,relatime,uid=1000,gid=1000,fmask=0337,dmask=0227,codepage=437,iocharset=iso8859-1,shortname=lower,errors=remount-ro 0 0
/dev/block/bootdevice/by-name/sns /sns ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/drm /persist-lg ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/mpt /mpt ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,errors=continue,data=ordered 0 0
/dev/block/bootdevice/by-name/carrier /carrier ext4 rw,seclabel,nodev,relatime,noauto_da_alloc,data=ordered 0 0
tmpfs /storage tmpfs rw,seclabel,relatime,mode=755,gid=1000 0 0
/dev/fuse /mnt/runtime/default/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /storage/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /mnt/runtime/read/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
/dev/fuse /mnt/runtime/write/emulated fuse rw,nosuid,nodev,noexec,noatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0
EagerestWolf said:
That won't work, we need root, and before we can do anything related to TWRP, we need fastboot, so this is all in vain.
Sent from my LGLS775 using Tapatalk
Click to expand...
Click to collapse
Have you been able to achieve some progress? If you need to try I have some time and one of these phone to try. I really need root on this version.
coolbeans2016 said:
terminal:
cat /proc/cmdline
trying to get kernel cmd line
& arguments
also stock boot.img
but keep getting perm denied
Can you get any of this so TWRP can be ported?
The person who did TWRP for the Stylo 2 + says he can port TWRP for Stylo 2 LGLS775ABB (my device) if whats listed above can be provided.
Any ideas?
Click to expand...
Click to collapse
You can get your cmdline from unpacked boot
Sent from my SM-J320P using Tapatalk
coolbeans2016 said:
terminal:
cat /proc/cmdline
trying to get kernel cmd line
& arguments
also stock boot.img
but keep getting perm denied
Can you get any of this so TWRP can be ported?
The person who did TWRP for the Stylo 2 + says he can port TWRP for Stylo 2 LGLS775ABB (my device) if whats listed above can be provided.
Any ideas?
Click to expand...
Click to collapse
rick.wardenburg said:
You can get your cmdline from unpacked boot
Sent from my SM-J320P using Tapatalk
Click to expand...
Click to collapse
This is cmdline from unpacked boot image.
Code:
cmdline = console=ttyHSL0,115200,n8 androidboot.console=ttyHSL0 androidboot.hardware=ph1 user_debug=31 msm_rtb.filter=0x3F ehci-hcd.park=3 androidboot.bootdevice=7824900.sdhci lpm_levels.sleep_disabled=1 vmalloc=600m
Any progress on this or is it a another dead end for us?
Sent from my LGLS775 using Tapatalk
can someone pm me when you do obtain root permanently
....will keep checking...also i can make a stock dimp of my zv4 if ne one needs it since lg likes to keep everything tight....does anyone know how to enter download mode??
Doctur said:
can someone pm me when you do obtain root permanently
....will keep checking...also i can make a stock dimp of my zv4 if ne one needs it since lg likes to keep everything tight....does anyone know how to enter download mode??
Click to expand...
Click to collapse
And if someone tells you, please tell me. : )
I was going to root my friends Android, however after further discovery --- thus far--- it looks like this device has not been rooted yet.
Is anyone able to create a partion.xml for use with tool studio eMMC download tool. Im trying to figure it out myself and having a little trouble but I believe it should allow us to flash the v3 firmware.