Welcome to XDA

Search to go directly to your device's forum

Register an account

Unlock full posting privileges

Ask a question

No registration required
Post Reply

S-off with Firewater

OP ebautista

1st February 2014, 09:12 AM   |  #1  
OP Senior Member
Flag Malabon
Thanks Meter: 61
 
442 posts
Join Date:Joined: Mar 2008
More
Another S-Off script that was sent to me by coremark. Successfully s-off my device and supercid.
http://firewater-soff.com/

Thanks to @coremark.
The Following 2 Users Say Thank You to ebautista For This Useful Post: [ View ]
4th February 2014, 05:26 PM   |  #2  
Member
Thanks Meter: 13
 
48 posts
Join Date:Joined: Jul 2010
After gaining S-off on a fully stock device using Firewater + temproot, what is the easiest method for permanent rooting?
Since due to S-off full access is granted to all partitions, is it possible to install the su binary and superuser / superSu apk to the /system partition without flashing a custom recovery? For example by using "adb push" or a root file manager?
Where can I get a su binary? Should I extract it from superSu / superuser recovery ZIP package?

Could anyone walk me through the steps?
4th February 2014, 05:59 PM   |  #3  
koniiiik's Avatar
Senior Member
Flag Bratislava
Thanks Meter: 130
 
258 posts
Join Date:Joined: Jun 2008
Donate to Me
More
Quote:
Originally Posted by edorner

After gaining S-off on a fully stock device using Firewater + temproot, what is the easiest method for permanent rooting?
Since due to S-off full access is granted to all partitions, is it possible to install the su binary and superuser / superSu apk to the /system partition without flashing a custom recovery? For example by using "adb push" or a root file manager?
Where can I get a su binary? Should I extract it from superSu / superuser recovery ZIP package?

Could anyone walk me through the steps?

I'm afraid you'll need a custom recovery for this. The /system write protection is implemented in kernel (the kernel doesn't sync changes to the actual block device and keeps them in RAM) and S-OFF is completely orthogonal to this. To work around it, you'd need a custom kernel (which is not feasible at the moment since HTC haven't released the full source tree yet, unfortunately) or the wp-mod hack (which I would be afraid of using, to be honest).

Also, why avoid custom recovery when you're already S-OFF and you can flash the stock recovey anytime?
The Following User Says Thank You to koniiiik For This Useful Post: [ View ]
4th February 2014, 06:44 PM   |  #4  
Member
Thanks Meter: 13
 
48 posts
Join Date:Joined: Jul 2010
Quote:
Originally Posted by koniiiik

The /system write protection is implemented in kernel (the kernel doesn't sync changes to the actual block device and keeps them in RAM) and S-OFF is completely orthogonal to this.

You are right, that makes sense.
But then how is this possible (if it is at all)? -> http://forum.xda-developers.com/show....php?t=2339056
(Pls check out the 2nd post from member "Indirect".)
AFAIK the One has the exact same kind of /system write protection as the 901s. Doesn't it?


Just out of curiosity, why would you be afraid to use wp-mod? Unknown / unpublished source? Bad feedback from users?
Last edited by edorner; 4th February 2014 at 07:01 PM.
4th February 2014, 11:39 PM   |  #5  
koniiiik's Avatar
Senior Member
Flag Bratislava
Thanks Meter: 130
 
258 posts
Join Date:Joined: Jun 2008
Donate to Me
More
Quote:
Originally Posted by edorner

You are right, that makes sense.
But then how is this possible (if it is at all)? -> http://forum.xda-developers.com/show....php?t=2339056
(Pls check out the 2nd post from member "Indirect".)
AFAIK the One has the exact same kind of /system write protection as the 901s. Doesn't it?

To be honest, no idea. All I do know is that on my phone the write protection works the way it does and I don't really see a feasible way around it. Also, I haven't tried these exact steps. It's possible that adb remount does some extra work or something. Moreover, I'm not sure about the adb shell chmod ... command that would require root, wouldn't it? But since I haven't tried it, I can only guess.

If you don't mind trying it, I'd be interested in the results.

Quote:
Originally Posted by edorner

Just out of curiosity, why would you be afraid to use wp-mod? Unknown / unpublished source? Bad feedback from users?

The way I understand wp_mod works is that it monkey-patches the running kernel's filesystem driver to skip the check for the /system partition. In other words, it rewrites the code of the running kernel in-memory. This by itself is reason enough to be extremely careful around such code as it has potential for a major disaster. Missing the right memory location by any nonzero number of bytes can result in the kernel doing practically anything (most likely a crash).

Now, to make matters worse, these seem to be only a few binary versions of the kernel module and people seem to just take a binary compiled for one kernel, modify the version information within the file to make it match other kernels and load it on a completely different kernel. This, to me, is borderline insane, considering that the kernel binaries depend on the version of the kernel, used compiler and even compiler flags used when building.

Again, though, I haven't actually looked at the module's source code; can't say I'm suffering from a surplus of free time and I'm also not *that* interested in it. Most likely it's written in a robust enough way to have a high chance of success. (This seems to be backed up by anecdotal evidence the thing appears to work for people, which is a small wonder for me.) All of the above is actually just my interpretation of stuff I read in some threads here on XDA-developers and I haven't even tried to confirm it myself.

Still, for me, using the recovery for any such changes is a sufficient and acceptable workaround, since I don't need to modify /system that often.
The Following User Says Thank You to koniiiik For This Useful Post: [ View ]
5th February 2014, 10:49 AM   |  #6  
Member
Thanks Meter: 13
 
48 posts
Join Date:Joined: Jul 2010
Wow! Thanks for the exhaustive expanation about WP-mod!

Quote:

If you don't mind trying it, I'd be interested in the results.

Well I am also a bit skeptical about this solution. So I am not sure I will be brave enough to try it
But if I do decide to give it a try, I will post the results here, I promise.
6th February 2014, 03:17 AM   |  #7  
OP Senior Member
Flag Malabon
Thanks Meter: 61
 
442 posts
Join Date:Joined: Mar 2008
More
Edorner. It won't wipe. I tried it already.

Sent from my GT-I9305 using XDA Premium 4 mobile app
The Following User Says Thank You to ebautista For This Useful Post: [ View ]
Post Reply Subscribe to Thread
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes