PB62x/740: root + sshd, ftpd, smbd, iptables, usbnet (needs testers)

[nhedgehog]

Nice find!

[neil_swann80]

If you're having problems uninstalling the services via the Services.app, I had to comment out line 101:

rm -f /mnt/secure/.pkgver

Then reinstall Services.app with this change, you can then uninstall properly.

If .pkgver doesn't exist in /mnt/secure the uninstall won't proceed.

[Valwit]

pbjb-v8-16-g8f1fb88
Works fine on Verse Pro

[teaswift]

Originally Posted by neil_swann80

I've added a few lines to the jailbreak.app file to provide a simple dialog message that tests for the presence of the files and the required permissions. Could someone experiencing the failure try running it and report back? (They should only show if the root process fails)

Tested on Inkpad Color 3 running 6.8.2480. Not seeing any dialog box appearing. Device appears to not be rooted as there was no reboot and OPDS install script still unsuccessful.

[Padde]

I got an Era Color (Model: PB700K3) running 6.8.3282 and can confirm jailbreak.app not working. After confirming to install the jailbreak nothing is happening no success/failure message or reboot. I would love to help debugging this. My next step is to try creating a app that logs infos to see where the differences are for example cpu architecture or linux kernel.

## Update ##
uname -a output is

Linux pocketbook 4.9.56+ #725790392 SMP PREEMPT Mon Mar 18 16:41:55 EET 2024 armv7l GNU/Linux

[nomoi]

I have the same problem with the touchscreen not working after firmware update on PB740 (cf. https://www.mobileread.com/forums/sh...19&postcount=8 ); sadly the downgrade to an older firmware did not work for me either (due to some MD5 mismatch?).

Did you have any success on debricking your device?

[Uppy]

Can you help me to write a script in ini.d to run on autostart syncthing? My path for syncthing.app is mnt/ext1/applications/synchting.app and bin’s file path is mnt/ext1/applications/syncthing/syncthing(bin).

ChatGPT gives me this
#!/bin/sh
#
# /mnt/ext1/system/etc/init.d/S99autostart
#

case "$1" in
start)
echo "Starting syncthing"
/mnt/ext1/applications/syncthing/syncthing -no-browser -home="/mnt/ext1/applications/syncthing" &
;;
stop)
echo "Stopping syncthing"
killall syncthing
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
;;
esac

exit 0

[pbc2user]

Originally Posted by neil_swann80

I'm curious as to why it's not working on the InkPad Color 3 (pb743).

From how I understand the jailbreak to function it first unpacks the binaries "jailbreak" and "su" to /var/tmp, then uses the jailbreak binary (some weird voodoo exploit by sending a buffer to an IPC queue) to change permissions on /mnt/secure, then copies the su binary to this location (making further permissions to this newly situated su binary).

The most obvious failure point would be in setting permissions for /mnt/secure.

I've added a few lines to the jailbreak.app file to provide a simple dialog message that tests for the presence of the files and the required permissions. Could someone experiencing the failure try running it and report back? (They should only show if the root process fails)

Thanks for your suggestions.

On my Inkpad Color 2 (not Color 3) the checks for /mnt/secure are failing.

Quoting from the script...

/tmp/jailbreak "/bin/chattr -i /mnt/secure;/bin/chmod 755 /mnt/secure;cp -f /tmp/su /mnt/secure/su;/bin/chown 0:0 /mnt/secure/su;/bin/chmod 4755 /mnt/secure/su;/bin/chattr +i /mnt/secure/su;/bin/sync;/sbin/reboot"

... it seems that the very first command fails, because:

ls -l /bin/chattr
ls: /bin/chattr: No such file or directory

So I wanted to copy the chattr-binary from another Pocketbook device, but there it's just a symlink to /bin/busybox. So I tried to also just make a symlink on the Color 2, but it seems that the busybox version is built without it.

ln -s /bin/busybox /tmp/chattr
/tmp/chattr -i
chattr: applet not found

busybox --list
[
[[
arp
ash
awk
base64
basename
bunzip2
bzcat
bzip2
cat
catv
chgrp
chmod
chown
chroot
cksum
clear
conspy
cp
cut
date
...

So I copied the busybox-binary from the other device, but still no luck:

/var/tmp/su /tmp/chattr -i /mnt/secure
chattr: reading flags on /mnt/secure: Permission denied

Maybe I'll find time to try again later

[Uppy]

Originally Posted by Uppy

Can you help me to write a script in ini.d to run on autostart syncthing? My path for syncthing.app is mnt/ext1/applications/synchting.app and bin’s file path is mnt/ext1/applications/syncthing/syncthing(bin).

ChatGPT gives me this
#!/bin/sh
#
# /mnt/ext1/system/etc/init.d/S99autostart
#

case "$1" in
start)
echo "Starting syncthing"
/mnt/ext1/applications/syncthing/syncthing -no-browser -home="/mnt/ext1/applications/syncthing" &
;;
stop)
echo "Stopping syncthing"
killall syncthing
;;
*)
echo "Usage: $0 {start|stop}"
exit 1
;;
esac

exit 0

I made my .sh working, but i still dont know how to setup autorun on start. I was tryin "update-rc.d", and it maybe working, but ::sysnit: didnt work well for me

[neil_swann80]

Originally Posted by Uppy

I made my .sh working, but i still dont know how to setup autorun on start. I was tryin "update-rc.d", and it maybe working, but ::sysnit: didnt work well for me

If the script works and you're rooted (via ezdiy) it should be placed in: /mnt/ext1/system/init.d

(NOT /mnt/ext1/system/etc/init.d)

The script itself can be named anything you like as long as it has the extension .sh

[Uppy]

Originally Posted by neil_swann80

If the script works and you're rooted (via ezdiy) it should be placed in: /mnt/ext1/system/init.d

(NOT /mnt/ext1/system/etc/init.d)

The script itself can be named anything you like as long as it has the extension .sh

sadly, I don’t have folder init.d in system, only have one in etc. so, I create init.d in system and script also doesn’t work. And yes, my device is rooted

[pbc2user]

Originally Posted by pbc2user

So I copied the busybox-binary from the other device, but still no luck:

This is the error message when running the jailbreak manually:

/tmp/jailbreak "/var/tmp/chattr -i /mnt/secure;/bin/chmod 755 /mnt/secure;cp -f /tmp/su /mnt/secure/su;/bin/chown 0:0 /mnt/secure/su;/bin/chmod 4755 /mnt/secure/su;/var/tmp/chattr +i /mnt/secure/su;/bin/sync;/sbin/reboot" 
Sorry, user reader is not allowed to execute '/bin/sh -c /var/tmp/chattr -i /mnt/secure;/bin/chmod 755 /mnt/secure;cp -f /tmp/su /mnt/secure/su;/bin/chown 0:0 /mnt/secure/su;/bin/chmod 4755 /mnt/secure/su;/var/tmp/chattr +i /mnt/secure/su;/bin/sync;/sbin/reboot' as root on pocketbook.

[neil_swann80]

Originally Posted by Uppy

sadly, I don’t have folder init.d in system, only have one in etc. so, I create init.d in system and script also doesn’t work. And yes, my device is rooted

I use a startup script in location I specified and it works correctly. I also had to create the init.d directory myself.

Do you also have ezdiy's services.app package installed?

How are you creating the script file? On the PocketBook itself? If via a computer, is it Windows/Linux etc?

Try a simple script first:

#!/bin/sh
sleep 10
echo "test" > /mnt/ext1/startup_test.txt
exit

Call it something like: /mnt/ext1/system/init.d/test_script.sh
See if the txt file is created on startup.

[Uppy]

Originally Posted by neil_swann80

I use a startup script in location I specified and it works correctly. I also had to create the init.d directory myself.

Do you also have ezdiy's services.app package installed?

How are you creating the script file? On the PocketBook itself? If via a computer, is it Windows/Linux etc?

Try a simple script first:

#!/bin/sh
sleep 10
echo "test" > /mnt/ext1/startup_test.txt
exit

Call it something like: /mnt/ext1/system/init.d/test_script.sh
See if the txt file is created on startup.

I always use windows notebook to create .sh file. I have services and jailbreak installed. Now i try to write scripts on linux virtual box, and scripts working better, without any errors, but it didnt work on autostart from init.d folder. My command for make them executable is chmod +x. Do i need to formate my memory?