MobileRead Forums - View Single Post - How to jailbreak 5.6.1.0.2 (serial port) step by step

knc1 · 01-21-2015, 10:02 AM

Hmm...
I expected the output of the 'mount' command to show which partition was mounted as: '/' (in diags, it would be mmcblk0p2).

Let us assume that is what is mounted as /dev/root and '/'.
(Their initramfs system did that before switching the root system.)

Now the problem about not being able to login to the 'main' system as 'root' is that username does not have a password assigned to it (in the 'main' file system, only in the 'diags' file system).

The directions you linked to use a temporary mount point for the main system of /mnt/mmc
But they do not mention if that mount point already exists or if it does, if it is in use for something.

So create a mount point in /tmp (that is ramfs, the created mount point will go away when the system is re-booted).

Code:

mkdir /tmp/main

Then mount the main file system at that point:

Code:

mount /dev/mmcblk0p1 /tmp/main

That should allow access to the 'main' system's password file as:
/tmp/main/etc/passwd

The entry for 'root' currently prohibits logins -
It needs to be text edited to allow a password to be used

At which point, my memory fails me - and I don't have a version of that firmware running on anything.

Hmm...
Compare how /etc/passwd and /etc/shadow entries for 'root' are (those are the working ones for 'diags mode');
with the entries in /tmp/main/etc/passwd and /tmp/main/etc/shadow.

Then hope someone with a better memory than mine can pick up this thread and continue.

01-21-2015, 10:02 AM	#19
knc1 Going Viral Posts: 17,212 Karma: 18210809 Join Date: Feb 2012 Location: Central Texas Device: No K1, PW2, KV, KOA	Hmm... I expected the output of the 'mount' command to show which partition was mounted as: '/' (in diags, it would be mmcblk0p2). Let us assume that is what is mounted as /dev/root and '/'. (Their initramfs system did that before switching the root system.) Now the problem about not being able to login to the 'main' system as 'root' is that username does not have a password assigned to it (in the 'main' file system, only in the 'diags' file system). The directions you linked to use a temporary mount point for the main system of /mnt/mmc But they do not mention if that mount point already exists or if it does, if it is in use for something. So create a mount point in /tmp (that is ramfs, the created mount point will go away when the system is re-booted). Code: mkdir /tmp/main Then mount the main file system at that point: Code: mount /dev/mmcblk0p1 /tmp/main That should allow access to the 'main' system's password file as: /tmp/main/etc/passwd The entry for 'root' currently prohibits logins - It needs to be text edited to allow a password to be used At which point, my memory fails me - and I don't have a version of that firmware running on anything. Hmm... Compare how /etc/passwd and /etc/shadow entries for 'root' are (those are the working ones for 'diags mode'); with the entries in /tmp/main/etc/passwd and /tmp/main/etc/shadow. Then hope someone with a better memory than mine can pick up this thread and continue.