Quote:
Originally Posted by neil_swann80
Nice find! Have you used this method to get permanent root on your device? Should be easy enough to add the ezdiy's su binary to /mnt/secure. Once done you could try installing his services package.
|
Yes that is working: Device; U700k3.6.10.2359 (Pocketbook Era Color)
Steps:
1) Installed the right pbterm version
2) In Pbterm:
Code:
sh -c '/usr/cramfs/bin/iv2sh WriteConfig /mnt/secure/developer_mode privesc 1'
than reboot
3) Got su from here (
https://github.com/ezdiy/pbjb/releases/tag/v8 it is in the source code zip) and copied su into the device under win7 in folder su which corrospondends to /mnt/ext1/su
4a) Linux machine SSH access (connect the switched off device via USB cable to Linux machine):
Code:
ssh -o HostKeyAlgorithms=ssh-rsa root@192.168.205.1 -v
4b) Alternative to 4a on a Win7 machine:
Got RNDIS installed properly (sounds easier than it is). Connected via WinSCP:
Protocol: SCP
Hostname:192.168.205.1
Username:root
Passwort:
5) trying to remount /ebrmain ->
failed (missing rigths)
Code:
mount -o rw,remount /ebrmain
6) copy su into mnt/secure
Code:
cp /mnt/ext1/su/su /mnt/secure/su
7) trying to remount /ebrmain with su (
working)
Code:
/mnt/secure/su mount -o rw,remount /ebrmain
8) editing /ebrmain/config/device.cfg.gen: change line have_opds=0 to have_opds=1 (edit mode with i,ESC stops Edit mode, :w saves file :q quits vi)
Code:
vi /ebrmain/config/device.cfg.gen
9) trying to remount /ebrmain with su (working)
Code:
/mnt/secure/su mount -o ro,remount /ebrmain
10) Reboot device: OPDS is enabled
PS: I was allowed to change /mnt/secure/device.cfg without su but it was changed back after reboot.