Current ROOT Progress for G950U/G955U Snapdragon

[bill10]

there is nothing to update.. when there is u will be updated.. the kernelhe speaks of is the plain old combo firm boot.ing everyone has with a few prop values changed...

we cannot load anew policy since sepolicy is on a read only file system and we cannot chmod anything on a ro system either so anything we try cannot touch anything in an ro system as it will give an error so temp root is needed to do anything at all

---------- Post added at 04:52 PM ---------- Previous post was at 04:50 PM ----------



you dont know xda very well.. posting a rom thread without posting a rom is completely different than a root discussion thread.. how do you expect root to be achieved if there is no back and forth discussion between users??

Are any of these people in the back and forth discussion involved in the process of trying to achieve root. All Ive read on this thread is when this when that. To me it seems pretty much the same as a custom ROM not being completed. No offence please It just seems to me that with all the hard work your doing spending all this time dealing with us can't help out with what your trying to achieve is all. I've read 2 pages of people including myself discussing non root related issues and it can't help. Keep up the good work you do what you need to do[emoji111]

Sent from my SM-G955W using XDA-Developers Legacy app

 

[elliwigy]

I get ya, but for new people it makes you seem like a douche. Not that you are. I understand where you're coming from. That's why I periodically pop in to check.

well for new ppl the same answer should always be to read lol

i cannot and will not post in here everytime a new person asks for an update, they need to read just like the rest of us do and if they cant, well, i suppose someone else can feed them in or they will need to read up lol

 

[fademaydarkness]

There's a whole area called Questions & Answers for you non-technical ppl. This thread is for progress and updates, not to be filled with the same questions over and over again.

Then you so called technical people stop taking a pi** because of so called non technical people lol. Or just point to the Question & Answer section like you said. Just ignore the question or ask moderators to clean the thread instead of being pis*ed lol. Lmao. Also, ask to change this thread name instead of CURRENT PROGRESS. You can't stop new comers to read this whole pages. They will see the first page, also the name "CURRENT PROGRESS" and see the time & then the last page for updates. This will be like a chain cycle. The more you going to be pi**ed, or react on such type of question. It'll make it worst.

 

[elliwigy]

Are any of these people in the back and forth discussion involved in the process of trying to achieve root. All Ive read on this thread is when this when that. To me it seems pretty much the same as a custom ROM not being completed. No offence please It just seems to me that with all the hard work your doing spending all this time dealing with us can't help out with what your trying to achieve is all. I've read 2 pages of people including myself discussing non root related issues and it can't help. Keep up the good work you do what you need to do[emoji111]

well this is completely different than rom development.. you cannot have a solid direction to say hey, this is what we need to do and how to do it..

we need temp root.. i have tried exploits from most recent pocs all the way back to 2015 and not a single one worked.. ive tried all the obvious selinux changes such as load policy and we have looked into kernel modules.. nothing works

again, if you know how to hijack an init process or gain temp root then please let me know lol

other than that it seems we are working on edl as the only viable option until any working exploits come about

---------- Post added at 05:43 PM ---------- Previous post was at 05:41 PM ----------

Then you so called technical people stop taking a pi** because of so called non technical people lol. Or just point to the Question & Answer section like you said. Just ignore the question or ask moderators to clean the thread instead of being pis*ed lol. Lmao. Also, ask to change this thread name instead of CURRENT PROGRESS. You can't stop new comers to read this whole pages. They will see the first page, also the name "CURRENT PROGRESS" and see the time & then the last page for updates. This will be like a chain cycle. The more you going to be pi**ed, or react on such type of question. It'll make it worst.

it says current progress because THAT IS THE CURRENT PROGRESS..

why would someone read current progress then ask for current progress when its on the first page? silly lol

 

[fademaydarkness]

well for new ppl the same answer should always be to read lol

i cannot and will not post in here everytime a new person asks for an update, they need to read just like the rest of us do and if they cant, well, i suppose someone else can feed them in or they will need to read up lol

Yes that's what am saying, if they can't read , we can't make them read lol. By reacting or being sarcastic(not said you been sarcastic) it won't help, let others people who aren't mad answer for them ?

---------- Post added at 05:46 PM ---------- Previous post was at 05:43 PM ----------

well this is completely different than rom development.. you cannot have a solid direction to say hey, this is what we need to do and how to do it..

we need temp root.. i have tried exploits from most recent pocs all the way back to 2015 and not a single one worked.. ive tried all the obvious selinux changes such as load policy and we have looked into kernel modules.. nothing works

again, if you know how to hijack an init process or gain temp root then please let me know lol

other than that it seems we are working on edl as the only viable option until any working exploits come about

---------- Post added at 05:43 PM ---------- Previous post was at 05:41 PM ----------



it says current progress because THAT IS THE CURRENT PROGRESS..

why would someone read current progress then ask for current progress when its on the first page? silly lol

Yes it's the CURRENT PROGRESS, I don't have any problem with the names or anything. We also have to understand people are going to ask updates or not whether it's new comers or lazy people who can't read the pages.

They will just see the 1st page then see the date then ask for updates like it's been 1 or 2 month we haven't heard any updates bla bla. So for those people we can't be mad at them

---------- Post added at 05:59 PM ---------- Previous post was at 05:46 PM ----------

but the questions ppl are,asking are impossible to answer.. When are we going to have root, when is it going to be rooted, will we ever have root, what updates are there etc. are all impossible to answer then ppl get upset when you cant answer them....

facts are there has been no update because there has been no progress....

we are getting a lot of denies due to system being read only and/or flat out permission denied..

i have already posted that we need a way to hijack the init process or gain temp root to move further..

i am still messing with edl but my xmls are still not formatted properly as it spevifically tells me this while in edl mode and without a proper xml we do not flash anything..

so there is the update folks, same spot as the last 10 updates lol

Yeah. Post that we need to find the init process in the kernel to somehow call the su binary or make from that init process, a vulnerability to execute su binary.
But in the update section. Like I said, people just don't stop to ask or read neither we can make them read. Whoever made this thread, I guess he is gone. If someone can contact and update this, that will solve all the back and forth between people who getting mad ?

 

[elliwigy]

Yes that's what am saying, if they can't read , we can't make them read lol. By reacting or being sarcastic(not said you been sarcastic) it won't help, let others people who aren't mad answer for them ?

---------- Post added at 05:46 PM ---------- Previous post was at 05:43 PM ----------



Yes it's the CURRENT PROGRESS, I don't have any problem with the names or anything. We also have to understand people are going to ask updates or not whether it's new comers or lazy people who can't read the pages.

They will just see the 1st page then see the date then ask for updates like it's been 1 or 2 month we haven't heard any updates bla bla. So for those people we can't be mad at them

---------- Post added at 05:59 PM ---------- Previous post was at 05:46 PM ----------




Yeah. Post that we need to find the init process in the kernel to somehow call the su binary or make from that init process, a vulnerability to execute su binary.
But in the update section. Like I said, people just don't stop to ask or read neither we can make them read. Whoever made this thread, I guess he is gone. If someone can contact and update this, that will solve all the back and forth between people who getting mad ?

yea, i dont control this thread so i cant post it in OP lol.. but that is where we stand.. init controls basically everything (top process) so if we can find a way to take that over we can do pretty much anything.. hell, if someone can take iver init they can root the device at that point as theyd be able to reload policies and do pretty much anything..

the easiest way I believe anyways would be to take over init and firce write the eng boot.img while on the eng firmware.. then we will have root access and can do anything we want without having to take init over again lol

we essentially cant mount anything so we dont necessarily get permission denied but we get read only file system.. for example, we can chmod su to be executable but since its on an ro system we cant change its permissions..

the ability to mount it is essentially needing root.. only init process can do these things.. taking over init however is a very technical and involved process however that is beyond most ppls skillset, even some seasoned devs would probably have a hard time and its so technical someone would have to study the ins and outs which could take months or even longer to understand it lol

 

[fademaydarkness]

yea, i dont control this thread so i cant post it in OP lol.. but that is where we stand.. init controls basically everything (top process) so if we can find a way to take that over we can do pretty much anything.. hell, if someone can take iver init they can root the device at that point as theyd be able to reload policies and do pretty much anything..

the easiest way I believe anyways would be to take over init and firce write the eng boot.img while on the eng firmware.. then we will have root access and can do anything we want without having to take init over again lol

we essentially cant mount anything so we dont necessarily get permission denied but we get read only file system.. for example, we can chmod su to be executable but since its on an ro system we cant change its permissions..

the ability to mount it is essentially needing root.. only init process can do these things.. taking over init however is a very technical and involved process however that is beyond most ppls skillset, even some seasoned devs would probably have a hard time and its so technical someone would have to study the ins and outs which could take months or even longer to understand it lol

Dayum :laugh: Sammy really changed the game this time. If I'm correct, they provided su binary in the eng firm, but made the system ro.So, it's there but we can't touch. It's like a diamond(su) in the box(system) but we can't steal the diamond for our use. ? It's like saying Sammy saying, yeah beach take that LMAO.
So, whoever creates the exploit for this, this will be certainly a new kind of exploit which we haven't seen till now. Hope am wrong cuz new exploits are hard to found, it's there but people will think 2times before publishing.

 

[lucky_strike33]

You guys need to stop buying Samsung phones. Force Samsung's hand to change it up by allowing unlocked bootloader's.

 

[zerosource]

You guys need to stop buying Samsung phones. Force Samsung's hand to change it up by allowing unlocked bootloader's.

Of course, if there is any phone with better features and price tag out there.

 

[elliwigy]

Dayum :laugh: Sammy really changed the game this time. If I'm correct, they provided su binary in the eng firm, but made the system ro.So, it's there but we can't touch. It's like a diamond(su) in the box(system) but we can't steal the diamond for our use. ? It's like saying Sammy saying, yeah beach take that LMAO.
So, whoever creates the exploit for this, this will be certainly a new kind of exploit which we haven't seen till now. Hope am wrong cuz new exploits are hard to found, it's there but people will think 2times before publishing.

well technically the system is always ro and not user mountable.. the whole point of gaining root is to mount the system as rw to push su binaries..

so technically speaking, tge eng firm has su binaries but with its permissions I cannot execute su (permission denied.) And when trying to change its permissions (chmod) is when we get the read only message (cant change su permissions since its on a read only file system)

---------- Post added at 09:50 PM ---------- Previous post was at 09:48 PM ----------

You guys need to stop buying Samsung phones. Force Samsung's hand to change it up by allowing unlocked bootloader's.

the rooting community is a very small percentage of samsung users so i doubt we would be able to gain that much attention from Samsung to change their ways when they get millions of dollars from other entities and those are the ones that call the shots, not necessarily even Samsung

 

[Aridon]

You guys need to stop buying Samsung phones. Force Samsung's hand to change it up by allowing unlocked bootloader's.

There are other devices (including S8 devices with root), if it is important people have choices. Most of those choices have drawbacks and when you can buy a top of the line device for $600 a few months after release it doesn't make a ton of sense to buy an inferior product for nearly the same amount.

The value of root for many people has diminished tremendously over the years. Not saying I'd spit at having it, just that it isn't what is used to be. Options for non rooted users have nearly reached what most people were doing with root.

Titanium restores are the only thing I'm really missing right now. Would be nice but hardly necessary. Most of the reason I used titanium was ROM swapping. When the ROM just works and doesn't really need many tweaks other than disabling some junk it really isn't necessary to constantly restore everything from scratch.

Kernel tweaks? I'm buttery smooth with 10 hours of SOT. Unnecessary.

Disabled bixby and all the other bloat without root using disable pro.

Ads are all blocked already with DNS66.



Yeah I can't chronically flash different variations of the same crap. Probably for the best really. I'd prefer the **** just work anyway, which it does. I miss playing with things some but reality is root simply isn't nearly as necessary as it used to be.

 

[Art3714]

but the questions ppl are,asking are impossible to answer.. When are we going to have root, when is it going to be rooted, will we ever have root, what updates are there etc. are all impossible to answer then ppl get upset when you cant answer them....

facts are there has been no update because there has been no progress....

we are getting a lot of denies due to system being read only and/or flat out permission denied..

i have already posted that we need a way to hijack the init process or gain temp root to move further..

i am still messing with edl but my xmls are still not formatted properly as it spevifically tells me this while in edl mode and without a proper xml we do not flash anything..

so there is the update folks, same spot as the last 10 updates lol

I can help with xml...just registered to say this...on a side note remember the MOAR roms for s5?? They ended up making their own site to get away from this xda nonsense. Memory buffers is great place to start as that is an easy route to privilege escalation. DM me if you need assistance.

 

[this.guy.lol]

yes, i did.

Any way you can link me with the site you used to buy the Chinese model in a PM? I'm still unfamiliar with forums and how to pm someone. Please and thanks.

 

[odyssey61]

You guys need to stop buying Samsung phones. Force Samsung's hand to change it up by allowing unlocked bootloader's.

Yes, I can see the whole world immediately giving up their Samsung phones.

 

[partcyborg]

Just to make sure I understand:

The "stock" eng rom has the su binary installed but it's chmod 444 and ofc the root fs is r/o?

There HAS to be *some* way to execute the binary, otherwise why even install it? Is it known why the binary is there to begin with?

On another related note: if the su binary isn't +x is it even setuid root? If Samsung is ****ing with it's permissions for some reason it may not be, which will be harder to patch at runtime.

(I'm legitimately trying to help. I've been a site reliability engineer and Unix systems expert for over a decade. I know little about Android specific internals but if we are stuck on general Linux things maybe I can try and do some research)

 

[TechBSwift]

Just to make sure I understand:

The "stock" eng rom has the su binary installed but it's chmod 444 and ofc the root fs is r/o?

There HAS to be *some* way to execute the binary, otherwise why even install it? Is it known why the binary is there to begin with?

On another related note: if the su binary isn't +x is it even setuid root? If Samsung is ****ing with it's permissions for some reason it may not be, which will be harder to patch at runtime.

(I'm legitimately trying to help. I've been a site reliability engineer and Unix systems expert for over a decade. I know little about Android specific internals but if we are stuck on general Linux things maybe I can try and do some research)

Any help would be appreciated.

 

[shakan09]

I apologise if this is irrelevant.
https://xdaforums.com/sprint-galaxy-s8/how-to/free-sprint-s8-s8-g955u-g950u-root-t3608966

 

[hazmad]

I apologise if this is irrelevant.
https://xdaforums.com/sprint-galaxy-s8/how-to/free-sprint-s8-s8-g955u-g950u-root-t3608966

it's 2 months old.

 

[fademaydarkness]

I have heard sprint s8 has unlocked bootloader and some people saying no. So, I'm still confused does it have unlocked bl or not. I flashed sprint fw hoping my bl will be unlocked without unlocking my sim. That's a stupid decision. ? sorry for off topic. Just wanted to share. Now I can't go back to att. I can flash att fw but can't go back and unlock it. Sad. Ik there threads on carrier switching, didn't worked.

 

[Duck Quan]

I have heard sprint s8 has unlocked bootloader and some people saying no. So, I'm still confused does it have unlocked bl or not. I flashed sprint fw hoping my bl will be unlocked without unlocking my sim. That's a stupid decision. ? sorry for off topic. Just wanted to share. Now I can't go back to att. I can flash att fw but can't go back and unlock it. Sad. Ik there threads on carrier switching, didn't worked.

Sprint does not have a unlocked BL. Take it from me. I have Sprint and have been up and down this phone trying to find anything and everything relating to an unlocked BL or root and there is absolutely nothing.