Does CynogenMod unlock the bootloader? - Android Q&A, Help & Troubleshooting

I'm reading on their wiki and it says if your bootloader is locked when installing CynogenMod, it will unlock it for you.
On other websites/wiki's, I'm reading that in order to install CynogenMod, you need your bootlocker unlocked first.
So which one is it?

The point of a locked bootloader is for the manufacturers to maintain system integrity by disallowing modifications to the device's partitions. There are exceptions to the rule.

OLderDan said:
The point of a locked bootloader is for the manufacturers to maintain system integrity by disallowing modifications to the device's partitions. There are exceptions to the rule.
Click to expand...
Click to collapse
Sorry, what? This doesn't answer my question.

Bootloader is like the mom of your device granting "permission" to roms(cyanogenmod) to be installed.
It fist need be unlocked
So practically yes it unlocks your bootloader (which you can lock again afterwards, why , how google )

code777 said:
Bootloader is like the mom of your device granting "permission" to roms(cyanogenmod) to be installed.
It fist need be unlocked
So practically yes it unlocks your bootloader (which you can lock again afterwards, why , how google )
Click to expand...
Click to collapse
Okay, thank you.

Related

stupid question

I have the Mini Pro and I just looked in the service menu and found "Bootloader Unlock Allowed: No" . Now I haven't unlocked it myself, I have only flashed the global official software. Does this mean my phone will accept custom kernels or will it brick if I try?
Thanks
First of all there isnt such thing as a stupid question. Its only easier to answer. You cannot access fastboot without unlocking the bootloader, and you cant install a custom kernel without fastboot. You need to unlock it.
thanks for your reply.
OK so fastboot is needed to flash custom kernel. got that. But even though it says "Bootloader Unlock Enabled:No" I am still able to unlock it and enable fastboot correct?
Thanks
Yes, you have to use a 3rd party app. Cant remember the name, do some research. Its somewhere in the Development for our devices.
In this page http://androidflip.com/unlock-xperia-phones-bootloader-without-losing-drm-data-track-id-working/
says: If you see Bootloader Unlock Allowed: No that means bootloaders are already unlocked
What? No dude... When it says NO it means the bootloader is carrier locked...
Sent from my ST17i using XDA App
pepi74 said:
In this page http://androidflip.com/unlock-xperia-phones-bootloader-without-losing-drm-data-track-id-working/
says: If you see Bootloader Unlock Allowed: No that means bootloaders are already unlocked
Click to expand...
Click to collapse
This is what made me ask the question. But after looking on here http://unlockbootloader.sonyericsson.com/instructions
it says "2.In your phone, tap Service info > Configuration > Rooting Status. If Bootloader unlock allowed says Yes, then you can continue with the next step. If it says No, or if the status is missing, your device cannot be unlocked."
which made me suspect that I may not be able to unlock it whatsoever
have you bought your phone through carrier? its on contract? if yes, then sorry you cant unlock its bootloader
YES YOU CAN! But you have to pay... Or i think its for free now. Stop talking without doing some basic research first.
http://support.setool.net/showthread.php?3-UPDATES-AND-NEWS&p=75351#post75351
There. You can unlock your device by paying. THIS IS NOT AN ADVERTISMENT IT IS SIMPLY TO STOP THESE DAMN POSTS REGARDING BOOTLOADER UNLOCKING.
dumraden said:
YES YOU CAN! But you have to pay... Or i think its for free now. Stop talking without doing some basic research first.
http://support.setool.net/showthread.php?3-UPDATES-AND-NEWS&p=75351#post75351
There. You can unlock your device by paying. THIS IS NOT AN ADVERTISMENT IT IS SIMPLY TO STOP THESE DAMN POSTS REGARDING BOOTLOADER UNLOCKING.
Click to expand...
Click to collapse
why are you yelling at us? keep respect, i was assuming that he knows about carrier unlocking.
I am not yelling at you. I am just sick and tired of hearing this crap about Unlocked Bootloader: No and how to solve it.

Does the NT have a "locked bootloader"

This probably is not important, as I've already upgraded to CM9 and using it happily as a daily driver. I've been thinking about buying the Asus Transformer Infinity (TF700) and was reading about the tool to unlock the bootloader. I do understand that the "boot" area of the NVRAM is un-writable, and to allow this to be writable is to chance having that section of memory fubar, meaning no boot, meaning bricked device, etc.
Anyway, when I started coming up to speed on CM9 and reading most all of the pertinent threads, I don't recall reading anything on a locked bootloader for the NT. I rooted, prepared a bootable SD card with the .zip file, boot image and a few other files. Easy, but no unlock code or anything. So did that process unlock the bootloader and overwrite it with CM 9 files?
On a similar note, where does one find a memory map of the NT, showing where the bootloader and other partitions are? IE, I'd expect that the bootloader would take up the first block of memory, with other areas defined after that.
The bootloader is not locked (on the roms) Bauwks has unlocked it for us.
NookTabletsPower said:
The bootloader is not locked (on the roms) Bauwks has unlocked it for us.
Click to expand...
Click to collapse
If the original NT had a locked bootloader, then the process of flashing an new ROM was able to circumvent that?
georgia boy said:
I don't recall reading anything on a locked bootloader for the NT. .
Click to expand...
Click to collapse
Start reading!
http://forum.xda-developers.com/showthread.php?t=1480586
NookTabletsPower said:
The bootloader is not locked (on the roms) Bauwks has unlocked it for us.
Click to expand...
Click to collapse
The bootloader was never unlocked, as far as I'm aware. There was a flaw found that allowed the developers to bypass the bootloader and load custom images, including a new bootloader (cyanoboot).

State of Android Security with Unlocked Bootloader

Let's assume we have an Android device with:
Unlocked bootloader
Full Device Encryption
Password lockscreen
Of course, if it's rooted and with custom recovery, you can't lock the bootloader or you'll brick the device; so will Android security measures (FDE and password lock) still be able to prevent data exfiltration from physical possession of the device?
CipherSec said:
Of course, if it's rooted and with custom recovery, you can't lock the bootloader or you'll brick the device
Click to expand...
Click to collapse
Say what?
Wakamatsu said:
Say what?
Click to expand...
Click to collapse
I wish you can tell me I'm wrong. If this is wrong, it'll solve all of my concerns. I've read this exact info while rooting my Nexus.

Redmi note 4 rooting

Hello guys,
I've been trying to root this phone since i've bought it, problem is every option i read on the web doesnt work because phone's bootloader is locked, and all methods get to this point when u have to unlock ur phone bootloader but in order to do that u have to get in the phone bootloader wich is locked. So who the hell is giving advices like these i dont know. Problem is that i am motivated to still root it, nothing its impossible.
So i am asking, did anyone from EU, with the EU ROM (full of mallware) MIUI 8, managed to unlock its bootloader and then managed to root it ?! please lets discuss here the options that work and the options that didnt work so we can make it through and solve this problem, everything thats on web at this moment 27-11-2016 doesnt work on the False EU MIUI 8.
Thanks.
CatalinSava said:
Hello guys,
I've been trying to root this phone since i've bought it, problem is every option i read on the web doesnt work because phone's bootloader is locked, and all methods get to this point when u have to unlock ur phone bootloader but in order to do that u have to get in the phone bootloader wich is locked. So who the hell is giving advices like these i dont know. Problem is that i am motivated to still root it, nothing its impossible.
So i am asking you did anyone from EU, with the EU ROM (full of mallware) MIUI 8, managed to unlock its bootloader and then managed to root it ? please lets discuss here the options that work and the options that didnt work so we can make it through and solve this problem, everything thats on web at this moment 27-11-2016 doesnt work on the False EU MIUI 8.
Thanks.
Click to expand...
Click to collapse
Not posibble without unlocked bootloader. Even the pre-rooted China Developer rom needs phone with unlocked bootloader. Good luck with unlocking the bootloader.
EU ROM full of malware?!?! Where did you get that idea? Completely false.
Anyway as said, yes you do need to unlock bootloader. Impossible any other way, because the system has dm-verity (similar to HTC S-On) which prevents modification to /system. So if you can't modify system or boot partition then you can't put Superuser binaries anywhere. Unlocked bootloader allows to put Superuser on boot pertition.
Sent from my Redmi Note 4 using Tapatalk
CosmicDan said:
EU ROM full of malware?!?! Where did you get that idea? Completely false.
Anyway as said, yes you do need to unlock bootloader. Impossible any other way, because the system has dm-verity (similar to HTC S-On) which prevents modification to /system. So if you can't modify system or boot partition then you can't put Superuser binaries anywhere. Unlocked bootloader allows to put Superuser on boot pertition.
Sent from my Redmi Note 4 using Tapatalk
Click to expand...
Click to collapse
Can't we just flash a recovery-that can disable dm-verity using SP Flash and root the phone that way?
I am guessing not because no one has said it works
I'm getting rly impatient because I still havent got my bootloader unlock request approved yet lol
asusm930 said:
Can't we just flash a recovery-that can disable dm-verity using SP Flash and root the phone that way?
I am guessing not because no one has said it works
I'm getting rly impatient because I still havent got my bootloader unlock request approved yet lol
Click to expand...
Click to collapse
No because dm-verity is enabled/set in the kernel (ramdisk on boot partition), and if you modify the boot partition with a locked bootloader then it won't boot
Locked bootloader = prevents boot partition from being tampered with
dm-verity = set in boot partition, prevents system partition from being tampered with
So you simply need to unlock bootloader, there is just no other way to exploit the device (no possible attack vector). The device is very secure, like all Marshmallow devices.
So what is this false EU firmware you speak of? Obviously not the xiaomi.eu one because that requires unlocked bootloader.
You can flash global stable via SP Flash Tool, that's your best bet while waiting for bootloader unlock. If it's taking more than 1 week then you can contact official support or something via en.miui.com forum (its down at the moment for some reason).
CosmicDan said:
No because dm-verity is enabled/set in the kernel (ramdisk on boot partition), and if you modify the boot partition with a locked bootloader then it won't boot
Locked bootloader = prevents boot partition from being tampered with
dm-verity = set in boot partition, prevents system partition from being tampered with
So you simply need to unlock bootloader, there is just no other way to exploit the device (no possible attack vector). The device is very secure, like all Marshmallow devices.
So what is this false EU firmware you speak of? Obviously not the xiaomi.eu one because that requires unlocked bootloader.
You can flash global stable via SP Flash Tool, that's your best bet while waiting for bootloader unlock. If it's taking more than 1 week then you can contact official support or something via en.miui.com forum (its down at the moment for some reason).
Click to expand...
Click to collapse
have you atempted to see what actually happens when a bootloader is unlocked? Like what does the miunlocker do/flash on the phone?
---------- Post added at 05:20 AM ---------- Previous post was at 05:04 AM ----------
CosmicDan said:
No because dm-verity is enabled/set in the kernel (ramdisk on boot partition), and if you modify the boot partition with a locked bootloader then it won't boot
Locked bootloader = prevents boot partition from being tampered with
dm-verity = set in boot partition, prevents system partition from being tampered with
So you simply need to unlock bootloader, there is just no other way to exploit the device (no possible attack vector). The device is very secure, like all Marshmallow devices.
So what is this false EU firmware you speak of? Obviously not the xiaomi.eu one because that requires unlocked bootloader.
You can flash global stable via SP Flash Tool, that's your best bet while waiting for bootloader unlock. If it's taking more than 1 week then you can contact official support or something via en.miui.com forum (its down at the moment for some reason).
Click to expand...
Click to collapse
I'm gonna try to flash a twrp recovery using this guide http://en.miui.com/thread-371349-1-1.html
and replace the recovery file with TWRP. Will report if it works
Yea it doesnt work haha
CosmicDan said:
No because dm-verity is enabled/set in the kernel (ramdisk on boot partition), and if you modify the boot partition with a locked bootloader then it won't boot
Locked bootloader = prevents boot partition from being tampered with
dm-verity = set in boot partition, prevents system partition from being tampered with
So you simply need to unlock bootloader, there is just no other way to exploit the device (no possible attack vector). The device is very secure, like all Marshmallow devices.
So what is this false EU firmware you speak of? Obviously not the xiaomi.eu one because that requires unlocked bootloader.
You can flash global stable via SP Flash Tool, that's your best bet while waiting for bootloader unlock. If it's taking more than 1 week then you can contact official support or something via en.miui.com forum (its down at the moment for some reason).
Click to expand...
Click to collapse
Hey can you upload you miunlock tool folder here? Want to see if the miunlock tool downloaded anything that enabled the bootloader unlock
asusm930 said:
Hey can you upload you miunlock tool folder here? Want to see if the miunlock tool downloaded anything that enabled the bootloader unlock
Click to expand...
Click to collapse
You can download it for free, just search for MiFlash - it's not a secret tool or anything.
Attempting to see what actually happens...? Even if I had the skills to reverse engineer MediaTek security, I wouldn't do it.
You're trying to do such simple things to trick the system but you need to realize that this hardware has been verified by Google themselves as secure and safe enough for Android Pay and SafetyNet and such. It *can not* be easily cracked, accept it.
Replacing recovery.img with TWRP? Seriously? How dumb do you think these companies are? Sorry for being rude but you really are just being silly.
You are wasting your own time, and now mine too... Sorry but I'm going to unsubscribe now because these questions are just getting silly.
Sent from my Redmi Note 4 using Tapatalk
CosmicDan said:
You can download it for free, just search for MiFlash - it's not a secret tool or anything.
Attempting to see what actually happens...? Even if I had the skills to reverse engineer MediaTek security, I wouldn't do it.
You're trying to do such simple things to trick the system but you need to realize that this hardware has been verified by Google themselves as secure and safe enough for Android Pay and SafetyNet and such. It *can not* be easily cracked, accept it.
Replacing recovery.img with TWRP? Seriously? How dumb do you think these companies are? Sorry for being rude but you really are just being silly.
You are wasting your own time, and now mine too... Sorry but I'm going to unsubscribe now because these questions are just getting silly.
Sent from my Redmi Note 4 using Tapatalk
Click to expand...
Click to collapse
Man, I did not know that xiaomi actually put that much effort on making their mediatek phones actually google levels of secure.
Was always under the impression that they sorta skimped out on their mediatek lines (as they had before).
Now I'll just not try to unlock it unofficially lol
asusm930 said:
Man, I did not know that xiaomi actually put that much effort on making their mediatek phones actually google levels of secure.
Was always under the impression that they sorta skimped out on their mediatek lines (as they had before).
Now I'll just not try to unlock it unofficially lol
Click to expand...
Click to collapse
They had before sure, but in the recent year or so (since they started actually locking bootloaders) things changed - they want to target international market too.
Only reason the devices are not sold globally is because of some Mediatek patent/legal battle or something, not too sure (it's literally the only reason why they have snapdragon "pro" versions). But the device has a global firmware sold in Taiwan and some other places, and it is Google CTS certified (preinstalled with Google Play) and, since it's Marshmallow, requires all kinds of Google-approved security measures these days, which a lot of countries need legally too, so yeah.
Glad you understand. I read that if it takes too long to get unlock code, you should try/already be flashed on China dev ROM - so do that if you have not already.
Have you tried the unlocking link on this link? http://xiaomi-mi.com/redmi-note-4/

Rooting without unlocking bootloader - is it possible?

I've just bought V30 and would like to root it. Preferably with Magisk.
Every guide I found requires to unlock bootloader. This is one step too far for me. Is there a way to root V30 without unlocking it's bootloader?
przemhb said:
I've just bought V30 and would like to root it. Preferably with Magisk.
Every guide I found requires to unlock bootloader. This is one step too far for me. Is there a way to root V30 without unlocking it's bootloader?
Click to expand...
Click to collapse
NO.
Which variant did you buy?
With some, it's simply flashing a simple code via fastboot flash commands. On others you first have to convert to a variant which has fastboot flash commands, so you can flash that code. If you tell us which variant you bought, you will know if you have extra steps or not...
For all V30/V30+/V30S (except T-mobile H932) for bootloader unlock and root, you need to:
have fastboot flash commands
be on specific Oreo firmware
use the "fake" bootloader unlock code
install TWRP and flash Magisk (OK technically there is a way to root without installing TWRP, but it's easier with TWRP)
WTF V30/V30+/V30S Bootloader Unlock and Root
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
I don't want to loose my warranty, DRM protected stuff playback capability, etc.
These warnings from LG bootloader unlock website worry me and make me extra cautious. I have to be 100% sure none of the things will happen:
"When unlocking the bootloader, applications which require a trusted execution environment (TEE) to operate will not work properly because after unlocking the bootloader the device will no longer be trusted.
Unlocking the bootloader will also affect the DRM protection of your device, therefore some applications which require DRM protection may not work anymore or block certain functions due to this untrusted state.
Common examples for affected applications are services which offer download/streaming of paid multimedia content like music and movies or services offering mobile payment."
Is there at least reliable app+data migration utility to move my apps with data from an old (Marshmallow) phone to this new one? LG Mobile Switch didn't manage to migrate apps' data.
przemhb said:
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
I don't want to loose my warranty, DRM protected stuff playback capability, etc.
These warnings from LG bootloader unlock website worry me and make me extra cautious. I have to be 100% sure none of the things will happen:
"When unlocking the bootloader, applications which require a trusted execution environment (TEE) to operate will not work properly because after unlocking the bootloader the device will no longer be trusted.
Unlocking the bootloader will also affect the DRM protection of your device, therefore some applications which require DRM protection may not work anymore or block certain functions due to this untrusted state.
Common examples for affected applications are services which offer download/streaming of paid multimedia content like music and movies or services offering mobile payment."
Is there at least reliable app+data migration utility to move my apps with data from an old (Marshmallow) phone to this new one? LG Mobile Switch didn't manage to migrate apps' data.
Click to expand...
Click to collapse
LG also throws a scary bootloader unlock warning in your face.
LG's "warning" is to keep you from rooting your phone. If you've rooted phones before, its no different.
Magisk hides root, so all apps work.
Anyone who's rooted their V30 can tell you how it is. The threads here are very active!
But it's your decision.
Is it possible to lock back the bootloader at the end of the process?
przemhb said:
Is it possible to lock back the bootloader at the end of the process?
Click to expand...
Click to collapse
At the end of what process? Rooting? You don't seem to understand, you have to unlock the bootloader to install TWRP. You have to install TWRP to flash Magisk. OK, technically there is a way to root without TWRP (by installing a rooted kernel), but you still need bootloader unlock.
You seem hung up on bootloader unlock when it's REALLY root that LG is trying to prevent. They really couldn't care less about bootloader unlock, they are focusing on that to prevent you from rooting your phone. Because once you unlock your bootloader you are one step away from root...
Yeah, you can lock the bootloader back if you no longer want root.
Most phones require bootloader unlock to root -- Motorola, Pixel, LG, ZTE, OnePlus.
---------- Post added at 11:59 PM ---------- Previous post was at 11:51 PM ----------
przemhb said:
Thank you for your reply. I've bought European H930. Unbranded.
Android 8.0.0. Build: OPR1.170623.026. SW: V20d-EUR-XX. Security patch: 1.03.2018.
Click to expand...
Click to collapse
I'm sorry, what is the DATE of the security patch? May, July, September? If pre-July, you are good to go. You just flash a simple code with fastboot. If July or later, you would need to temporarily downloader to pre-July 2018 firmware.
Thank you for your detailed answers! I really appreciate them.
ChazzMatt said:
At the end of what process? Rooting?
Click to expand...
Click to collapse
Yes. I was wondering if it is possible to lock back the bootloader once the phone is rooted, TWRP, Magisk are there. The question behind it is if having unlocked bootloader doesn't unnecessarily increase security risk (of course the main risk is to have rooted phone, and I accept it).
ChazzMatt said:
Yeah, you can lock the bootloader back if you no longer want root.
Click to expand...
Click to collapse
Good news. Suppose I would unroot and lock back the bootloader, then send the phone to warranty service. Is it possible for the service to discover the phone was rooted and reject my warranty claim?
ChazzMatt said:
Most phones require bootloader unlock to root -- Motorola, Pixel, LG, ZTE, OnePlus.
Click to expand...
Click to collapse
So far I've rooted every phone without unlocking bootloader. It was harder, but in some cases possible (Xperia Z2, Xperia V, Motorola Defy).
ChazzMatt said:
I'm sorry, what is the DATE of the security patch? May, July, September? If pre-July, you are good to go. You just flash a simple code with fastboot. If July or later, you would need to temporarily downloader to pre-July 2018 firmware.
Click to expand...
Click to collapse
It's March.
I am not familiar with Magisk. Is it safer from the security point of view than classic roots with SuperSu+BusyBox?
Correct me if I am wrong, but unlocking bootloader means gaining write access to boot partition. TWRP needs to be stored on it. Kernel is also there. And where is Magisk stored?

Categories

Resources