Rooting Galaxy Tab P1000
===================
I had success rooting my Galaxy Tab P1000 (running Froyo & Gingerbread) with SuperOneClick 2.3.3 so that I could Carrier Unlock the Vodafone for use with Canadian carriers (Bell/Virgin). refer my post dated Oct24 2011
http://forum.xda-developers.com/showthread.php?t=843323&page=46
This is the 3RD time it had reverted back to Vodafone; not 100% sure, but it seems to occur after getting a notification for a Samsung Push update.
Presently the phone is as follows:
Model: GT-P1000 from Vodafone Australia
Firmware: 2.3.6
Baseband ver.: P1000XXJR2
Kernel ver.: 2.6.35.7
[email protected] #2
Build ver.: GINGERBREADXWJU4
Have tried SuperOneClick 2.3.3. and DooMLoRD Easy rooting toolkit (v4.0) without success.
Would appreciate tips on tools/procedure to successfully root device

Thanks...
1. SuperOneClick 2.3.3 "fails", or "hangs", at Step 5 and Step 7
Logs from Failure at Step 7 follow:
= start of log =======================
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
export PS1=""
$ export PS1=""
getprop ro.build.version.release > /data/local/tmp/output 2>&1
export TEMPRANDOM=30213
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
2.3.6
END:30213export PS1=""
getprop ro.product.manufacturer > /data/local/tmp/output 2>&1
export TEMPRANDOM=12349
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
samsung
END:12349export PS1=""
getprop ro.product.model > /data/local/tmp/output 2>&1
export TEMPRANDOM=89492
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
export TEMPRANDOM=89492
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
GT-P1000
END:89492export PS1=""
getprop ro.build.version.incremental > /data/local/tmp/output 2>&1
export TEMPRANDOM=76636
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
XWJU4
END:76636export PS1=""
ls -l /system/xbin/su > /data/local/tmp/output 2>&1
export TEMPRANDOM=49054
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
/system/xbin/su: No such file or directory
END:49054export PS1=""
ls -l /system/bin/su > /data/local/tmp/output 2>&1
export TEMPRANDOM=87919
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
/system/bin/su: No such file or directory
END:87919export PS1=""
chmod 755 /data/local/tmp/busybox > /data/local/tmp/output 2>&1
export TEMPRANDOM=36496
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
END:36496export PS1=""
/data/local/tmp/busybox whoami > /data/local/tmp/output 2>&1
export TEMPRANDOM=75361
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
export TEMPRANDOM=75361
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
whoami: unknown uid 2000
END:75361export PS1=""
rm /data/local/tmp/boomsh > /data/local/tmp/output 2>&1
export TEMPRANDOM=80071
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
export TEMPRANDOM=80071
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
END:80071export PS1=""
rm /data/local/tmp/sh > /data/local/tmp/output 2>&1
export TEMPRANDOM=67215
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
END:67215export PS1=""
chmod 700 /data/local/tmp/zergRush > /data/local/tmp/output 2>&1
export TEMPRANDOM=34626
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
END:34626export PS1=""
cd /data/local/tmp/ > /data/local/tmp/output 2>&1
export TEMPRANDOM=21770
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
END:21770export PS1=""
export TEMPRANDOM=75361;export PS1=END:$TEMPRANDOM;./zergRush
[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.
[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.
[+] Found a GingerBread ! 0x00000118
[+] Found a Samsung, running Samsung mode
[*] Scooting ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 149 zerglings ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !
END:75361export PS1=""
export PS1=""
/data/local/tmp/busybox mount -o rw,remount /system > /data/local/tmp/output 2>&1
export TEMPRANDOM=75063
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
mount: permission denied (are you root?)
END:75063export PS1=""
/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1
export TEMPRANDOM=62208
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
rootfs on / type rootfs (ro,relatime)
tmpfs on /dev type tmpfs (rw,relatime,mode=755)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
none on /acct type cgroup (rw,relatime,cpuacct)
/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)
tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)
tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)
tmpfs on /app-cache type tmpfs (rw,relatime,size=12288k)
none on /dev/cpuctl type cgroup (rw,relatime,cpu)
/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/mmcblk0p3 on /preload type vfat (ro,nodev,noatime,nodiratime,fmask=0133,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)
/dev/block/mmcblk0p2 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl3 on /efs type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/vold/179:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)
END:62208export PS1=""
/data/local/tmp/busybox mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1
export TEMPRANDOM=34626
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
mount: permission denied (are you root?)
END:34626export PS1=""
/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1
export TEMPRANDOM=21770
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
export TEMPRANDOM=21770
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
rootfs on / type rootfs (ro,relatime)
tmpfs on /dev type tmpfs (rw,relatime,mode=755)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
none on /acct type cgroup (rw,relatime,cpuacct)
/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)
tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)
tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)
tmpfs on /app-cache type tmpfs (rw,relatime,size=12288k)
none on /dev/cpuctl type cgroup (rw,relatime,cpu)
/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/mmcblk0p3 on /preload type vfat (ro,nodev,noatime,nodiratime,fmask=0133,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)
/dev/block/mmcblk0p2 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/stl3 on /efs type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)
/dev/block/vold/179:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)
END:21770export PS1=""
mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1
export TEMPRANDOM=92927
export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output
mount: Operation not permitted
END:92927
= end of log ================
2. Lastly, I tried DooMLoRD Easy rooting toolkit (v4.0)
the program fails, with the following log entries
= start of log =====================
---------------------------------------------------------------
Easy rooting toolkit (v4.0)
created by DooMLoRD
using exploit zergRush (Revolutionary Team)
Credits go to all those involved in making this possible!
---------------------------------------------------------------
[*] This script will:
(1) root ur device using latest zergRush exploit (21 Nov)
(2) install Busybox (1.18.4)
(3) install SU files (binary: 3.0.3 and apk: 3.0.6)
(4) some checks for free space, tmp directory
(will remove Google Maps if required)
[*] Before u begin:
(1) make sure u have installed adb drivers for ur device
(2) enable "USB DEBUGGING"
from (Menu\Settings\Applications\Development)
(3) enable "UNKNOWN SOURCES"
from (Menu\Settings\Applications)
(4) [OPTIONAL] increase screen timeout to 10 minutes
(5) connect USB cable to PHONE and then connect to PC
(6) skip "PC Companion Software" prompt on device
---------------------------------------------------------------
CONFIRM ALL THE ABOVE THEN
Press any key to continue . . .
--- STARTING ----
--- WAITING FOR DEVICE
--- creating temporary directory
mkdir failed for tmp, File exists
--- cleaning
rm failed for *, No such file or directory
--- pushing zergRush
62 KB/s (23060 bytes in 0.359s)
--- correcting permissions
--- executing zergRush
[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.
[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.
[+] Found a GingerBread ! 0x00000118
[+] Found a Samsung, running Samsung mode
[*] Scooting ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 149 zerglings ...
[*] Sleeping a bit (~40s)...
[*] Waking !
[*] Sending 189 zerglings ...
[-] Hellions with BLUE flames !
--- WAITING FOR DEVICE TO RECONNECT
if it gets stuck over here for a long time then try:
disconnect usb cable and reconnect it
toggle "USB DEBUGGING" (first disable it then enable it)
--- DEVICE FOUND
--- pushing busybox
1399 KB/s (1075144 bytes in 0.750s)
--- correcting permissions
--- remounting /system
mount: permission denied (are you root?)
--- checking free space on /system
13 KB/s (439 bytes in 0.031s)
df: /mnt/.lfs: Function not implemented
--- Free space on /system : 6852 bytes
--- no cleanup required
--- copying busybox to /system/xbin/
/system/xbin/busybox: cannot open for write: Read-only file system
--- correcting ownership
Unable to chmod /system/xbin/busybox: No such file or directory
--- correcting permissions
Unable to chmod /system/xbin/busybox: No such file or directory
--- installing busybox
/system/xbin/busybox: not found
--- pushing SU binary
failed to copy 'files\su' to '/system/bin/su': Read-only file system
--- correcting ownership
Unable to chmod /system/bin/su: No such file or directory
--- correcting permissions
Unable to chmod /system/bin/su: No such file or directory
--- correcting symlinks
rm failed for /system/xbin/su, Read-only file system
link failed Read-only file system
--- pushing Superuser app
failed to copy 'files\Superuser.apk' to '/system/app/./Superuser.apk': Read-only
file system
--- cleaning
--- rebooting
ALL DONE!!!
Press any key to continue . . .
= end of log ======================
= End of Post ====================