[DROID] Root instructions (UPDATED)

[cellulararrest]

The following is a guide for how to obtain root access within an ADB shell, then locally on the device.

UPDATED TO SIMPLE VERSION WITHOUT ADB

--------------------------------------------------------------------------

Credit:

- embeem for bringing the Eclair signature check hole to attention.
- For creating the exploited update package: Zinx Verituse (initially posted here)
- mjxg for writing a complete guide which I have modified and reposted here (original thread here
- Cyanogen for providing Superuser.

--------------------------------------------------------------------------

THIS WILL NOT UPDATE YOU TO 2.0.1. If you would like to end up with a rooted 2.0.1 and haven't been pushed the update OTA yet, then please follow this (http://alldroid.org/viewtopic.php?f=210&t=568) guide THEN follow the directions below.

--------------------------------------------------------------------------

1 - Download the droid-super_user.zip file from: http://alldroid.org/download/file.php?id=659 (md5sum cf653352967253e99d967498ffd9ce69).
Do not extract.
2 - Rename the file to "update.zip".
3 - Plug your Droid into your computer via USB. On the Droid go to the Notifications bar and select "USB Connected" then press "Mount".
4 - Once the device is mounted, the SD card will show as a removable device on your computer
5 - Put the "update.zip" file you just renamed into the Root (top) directory of your SD Card.
6 - Unmount the device from your computer, and turn the Droid off.
7 - Hold down the "X" key on the physical keyboard and while doing so press the power button. Hold both of them down until you see a Triangle with an !.
8 - Press the Vol+ and the Camera button together until you get a menu.
9 - Using the D-pad on the physical keyboard, select the option to update with the update.zip file.
10 - This should take a little bit. Once it's done select the option to reboot the phone.

Now you can download a root application, or terminal emulator and try out your new found root access.

This works with 2.0.1

Please do not start removing any applications just yet. You will run into problems trying to flash anything. Wait until we have a recovery image made.

 

[zikronix]

can some one dump the phone?

 

[hharte]

Looking at the change in Gerritt:
https://review.source.android.com/#change,12807

It has not been approved yet, although that doesn't prevent Mot from cherry picking it.

I just tried the droid-root.zip update on my Droid, worked great. The only thing I might add is to rename the otakeys.zip from /system/etc/security/otakeys.zip to prevent future OTA updates.

Don't want to lose root now that we have it.

-Howard
http://www.magicandroidapps.com. - Home of Better Terminal Emulator Pro, the best terminal emulator for Droid.

 

[hharte]

With root, you can dump out the MTD partitions to /data/local, ie:

adb shell
$ su
# cd /data/local
# cat /proc/mtd
Use this output to figure out which partitions are what, and then dump them out, ie:

# cat /dev/block/mtdblock0 > pds.bin

Then 'adb pull' the /data/local/*.bin files to your PC.

-Howard
http://www.magicandroidapps.com - Home of Better Terminal Emulator Pro, the best terminal emulator for Droid.

 

[cellulararrest]

There is now a more streamlined way of going about this. I need to update the guide.

 

[addyct]

NEWEST METHOD that DOES NOT require adb
New exploit zip, including Superuser from CyanogenMod

First you have to update your phone to 2.0.1. If you have already done this manually, or if your phone has already received the OTA update, move on to the next section.

First, download this attachment ( http://alldroid.org/download/file.php?id=646 ) and rename it to "update.zip".
Copy update.zip to the SDcard in your phone.
Reboot your phone to recovery mode by holding down x while the phone turns on. once you see the /!\ emblem, press the Volume Up and Camera buttons at the same time.
Select Install update.zip from the menu.
Reboot once it is done.
Now your phone is updated to 2.0.1

Now, to root the phone.
download this attachment ( http://alldroid.org/download/file.php?id=659 ) and rename it "update.zip"
Copy update.zip to the phones sdcard
reboot phone to recovery mode (hold x while turning phone on, press volume up + camera button)
install update.zip
reboot

and you are done.
all credit to Zinx Verituse over on Alldroid.org

 

[derrickonline]

su works but apps still say I don't have root?

I'm an IT Professional not a newb, but not super great on Linux either.

I've followed the rooting steps, after updating manually to 2.0.1

The issue is, I can go: su using a term emulator on my phone and it says "access granted courtesy of magicandroidapps" (something like that).

I can do things through the term emulator, but for some reason when I download apps that require root and try to use them it still says I don't have root access? What gives? I couldn't even rename a file in /etc/bluez using ROOT EXPLORER (a file manager).

It's like root works on term emulator but not through GUI apps? Am I missing something?

 

[derrickonline]

Disregard, problem solved

Disregard.

 

[cellulararrest]

Updated to new, simple, one flash instructions.

 

[dabo318]

i cant get this to work for nothing. when i download the files i extract them to the desktop then put them into one folder named update.zip is this wrong?

 

[zfly9]

i cant get this to work for nothing. when i download the files i extract them to the desktop then put them into one folder named update.zip is this wrong?

It never said to extract. Rename the .zip to update.zip (make sure it's not update.zip.zip) then carry on.

 

[fastludeh22]

I've got a question. This is a hole found in android, so this should work for any android device, as long as you append the original exploit.zip to that devices update.zip, correct?

 

[dabo318]

ok i finally got the zip on the phone and trying to setup metamorph now. its been setting up file: zip for about five min is this normal?

 

[cellulararrest]

Here is a link to a tutorial on how to create your own update.zip in order to deliver whatever you may need to (with a size limitation).

http://alldroid.org/viewtopic.php?f=210&t=626

Please note this is exclusive to the current Android 2.0

 

[fastludeh22]

Here is a link to a tutorial on how to create your own update.zip in order to deliver whatever you may need to (with a size limitation).

http://alldroid.org/viewtopic.php?f=210&t=626

Please note this is exclusive to the current Android 2.0

And 2.0.1 ... thanks though, that pretty much answered my question. So any device that gets pushed 2.0/2.0.1 ota update and on before this hole is patched up this should work on. Let's hope they don't patch it before we get a hold of a milestoine update.

Btw- someone should check out the 2.1 sense dump and see if this hole is still present.

Oh and sorry about getting slightly off topic, just seemed the most revelent place to ask.

 

[cellulararrest]

Yeah that would be good to check 2.1. But I don't think anyone is actually using that recovery image. If it's even available. Everyone has fancy dancy custom recovery images.

 

[rainabba]

COMPREHENSIVE HOWTO "ROOT YOUR DROID" (my best attempt anyhow)

*deleted* per a noobs request (cuz I've heard from others as well that my directions were outdated even though they use super-root from Cyanogen).

 

[addyct]

Rainabba, Please delete that post. it's out-of-date and incorrect.

 

[boostdscoob]

i just installed a terminal app from the market, type su and hit enter, it asked to allow or deny, so i believe just a terminal app will give you SU also, correct?
im an idiot when it comes to adb. also just a reminder to the root nobbs, if your using vista, just name the update, update dont add the .zip to it, or it wont work.

 

[cellulararrest]

Correct. Please don't start removing apps from your system. A few people have been doing that just because they can and are causing themselves real problems. Hold off until someone succeeds in their endeavors for a custom recovery image.