I've been messing around with my Dev Magic and found a site for the G1 with some stuff to try:
http://gettinthru.blogspot.com/2009/04/mods-for-tmobile-g1-at-your-own-risk.html
In there, some of the things suggested use the linux command "cp" to copy files from/to the SD card. Problem is, I can't see it listed. Here is the listing of commands in /system/bin:
system_server
mediaserver
app_process
surfaceflinger
dalvikvm
dexopt
rild
wlan_loader
sdutil
service
netcfg
dumpsys
hcid
dd
cmp
df
date
cat
bugreport
chmod
chown
wpa_supplicant
wpa_cli
wipe
watchprops
vmstat
umount
top
vold
sync
stop
start
smd
sleep
setprop
setconsole
sendevent
schedtop
set_grp_id
route
rmmod
rmdir
renice
rm
reboot
radiooptions
ps
qemud
printenv
notify
netstat
mv
mount
mkdosfs
lsmod
mkdir
ls
log
ln
ioctl
kill
installd
iftop
insmod
ifconfig
id
hd
htclogkernel
getevent
getprop
flash_image
dvz
dmesg
dumpcrash
dhcpcd
debug_tool
toolbox
dumpstate
servicemanager
hciattach
logcat
sdptool
dbus-daemon
gzip
showlease
sh
schedtest
ping
logwrapper
iptables
linker
debuggerd
dosfsck
gdbserver
pm
svc
input
am
ime
monkey
akmd
As you can see, no cp. Any suggestions like a .apk of the command to push over to it?
Cheers
you can use dd to copy files aslong as you dont have busybox ( on the dream "all" the rooted images come with busybox )...
However you can use busybox from a non-rooted device by copying it to the folder "sqlite_stmt_journals" as it has both exec/write rights...
Seem to be sorted now...
I found that I can install Busybox like the G1 owners have as standard:
http://www.androidfanatic.com/cms/community-forums.html?func=view&id=228&catid=9
Folowed the guide and have cp and loads of stuff to play with now.
Cheers for your responses.
No problem... Wont take long before custom images are put together that include busybox as the magic now can also be rooted like the dream.
the "rootme" rom i provide in my rooting procedure has busybox installed, as well as apps2sd
the easiest way to replace the "cp" command is using "cat"
cat "sourcefile" > "targetfile"
if you need to copy more files, create a small script with a "for" loop.
Tom
if anyone can help that would be awesome.. only take 5 min of your time...
we are trying to get some development going for the LG thrill 4g...
can somebody plz copy the flash_image file in the system/bin folder on your device and post it on this thread please!!!
thankyou your help is appreciated!!!
Looked but couldn't find the file you're talking about. Here's the file listing of my /system/bin folder:
heapMemMPApp.out
sharedRegionApp.out
mv
toolbox
dmmcopy.out
syslink_daemon.out
rtcreset
ifconfig
strmcopy_dyn.out
rm
framebuffer_test
mount
wlan_cu
interm3.out
ln
hd
sync
scale.out
rft.sh
lgospd
event_listener.out
lgdrmserver
lge_signaling_d
d2c_test
mke2fs
svc
sgx_flip_test
tomservice
sgx_init_test
nameServerApp.out
mpld
camera_test
stop
tune2fs_static
keystore
hal_client_test
btipsd
ip
am
mmclient
gsm0710muxd
procMgrApp.out
hciattach
audiotest
schedtop
omx_tests
dynreg.out
emc_serial_test
v4l2_gfx_client
dnsmasq
zerocopymsg.out
cmp
SkLibTiJpeg_Test
playwav
dhcpcd
flash_renderer_test
resize2fs
dd
strmcopy.out
pvr2d_test
printenv
chmod
testwrap
ls
cexec.out
ndc
rft
netstat
texture_benchmark
bridgeutil
syslink_tilertest.out
rcm_multithreadtest.out
pppd
input
wlan_loader
rzscontrol
qostest.out
ping.out
slpmtransport.out
tiap_loader
debuggerd
kill
watchprops
hostap
pcsync
chown
dosfsck
service
linker
logcat
fsck_msdos
bugreport
mke2fs_static
ducati_load.out
lgemuxtest
ovg_unit_test
sdptool
notifyping.out
ping
gateMPApp.out
mkdir
date
logwrapper
route
faultapp.out
recovery
utils_test
utilsApp.out
secureclocktest
sgx_clipblit_test
rcm_daemontest.out
notify
ifx_coredump
schedtest
pand
dumpsys
slpmtest.out
lsmod
mtpd
top
isomounter
lge-signaling-test
smd
mediaserver
insmod
applypatch
tiwlan_plts
renice
scale_dyn.out
surfaceflinger
dexopt
vold
bmgr
syslink_trace_daemon.out
gzip
overlay_test
dmm_daemontest.out
set_gadget_personality
listMPApp.out
HDMI_TEST_SEQ
e2fsck
umount
servicemanager
tc
slpmresources.out
tiler_ptest
ps
system_server
memmgr_test
glgps
dbus-daemon
cat
wpa_supplicant
320x240.nv12
app_process
lge_dataexchange_d
screencaptured
installd
lgospd-hid
dalvikvm
rcm_multitest.out
log
ioctl
bootanimation
iptables
df
id
sgx_render_flip_test
vmstat
heapBufMPApp.out
dumpstate
rcm_multiclienttest.out
Morningcall
netcfg
pm
getevent
emumux
sh
tiap_cu
ionice
nandread
lge-dataexchange-test
hal_server_test
start
sendevent
reboot
dmesg
dvz
lge_usim_test
newfs_msdos
sleep
rild
swap_enable.sh
bluetoothd
sgx_blit_test
monkey
tune2fs
vdc
btipsd_cli
services_test
run-as
tomclient
getprop
memmgrserver.out
instutility.out
racoon
ime
rmmod
swapon
wipe
lge_nvd
immvibed
iftop
setconsole
rmdir
pvrsrvinit
rcm_singletest.out
netd
messageQApp.out
setprop
Click to expand...
Click to collapse
Hope that helps!
Hmmmmm...
Sent from my LG Thrill 4G
The only "flash_image" file found in my o3d is located in rom manager's files.
Sent from my LG-P920 using XDA Premium App
I can't find it anywhere on /system, either.
Code:
$ pwd
/system
$ find . -name "flash_image" -print
$
i have not flash image too in my device
Well thanks for looking...
Sent from my LG Thrill 4G
Questions or Problems Should Not Be Posted in the Development Forum
Please Post in the Correct Forums and Read THIS
Moving to General
-- Do not flash this if you do not need it.
-- If this BusyBox provides you with the needs that you seek for but your current BusyBox does not provide them to you then uninstall your current BusyBox and flash this zip.
( BusyBox Distro for Android ARM/MIPS/x86 )
-- BusyBox is copyrighted by many authors between 1998-2013.
-- Licensed under GPLv2. See source distribution for detailed
copyright notices.
Click to expand...
Click to collapse
This isn't my work.
Usage: busybox [function [arguments]...]
or: busybox --list[-full]
or: busybox --install [-s] [DIR]
or: function [arguments]...
Click to expand...
Click to collapse
BusyBox is a multi-call binary that combines many common Unix utilities into a single executable. Most people will create a link to busybox for each function they wish to use and BusyBox will act like whatever it was invoked as.
After seeing so much lacking from busybox in my own personal use and experience I grew tired and spent hours searching for a more fully loaded compiled BusyBox which in turn would be stable.
Here is a list of all the current applets available for this version of BusyBox from A-Z:
A:
Code:
acpid
add-shell
addgroup
adduser
adjtimex
ar
arp
arping
ash
awk
B:
Code:
base64
basename
bbconfig
beep
blkid
blockdev
bootchartd
brctl
bunzip2
bzcat
bzip2
C:
Code:
cal
cat
catv
chat
chattr
chgrp
chmod
chown
chpasswd
chpst
chroot
chrt
chvt
cksum
clear
cmp
comm
conspy
cp
cpio
crond
crontab
cryptpw
cttyhack
cut
D:
Code:
date
dc
dd
deallocvt
delgroup
deluser
depmod
devmem
df
dhcprelay
diff
dirname
dmesg
dnsd
dnsdomainname
dos2unix
dpkg
dpkg-deb
du
dumpkmap
dumpleases
E:
Code:
echo
ed
egrep
eject
env
envdir
envuidgid
ether-wake
expand
expr
F:
Code:
fakeidentd
false
fbset
fbsplash
fdflush
fdformat
fdisk
fgconsole
fgrep
find
findfs
flash_eraseall
flash_lock
flash_unlock
flashcp
flock
fold
free
freeramdisk
fsck
fsck.minix
fsync
ftpd
ftpget
ftpput
fuser
G:
Code:
getopt
getty
grep
groups
gunzip
gzip
H:
Code:
halt
hd
hdparm
head
hexdump
hostid
hostname
httpd
hush
hwclock
I:
Code:
id
ifconfig
ifdown
ifenslave
ifplugd
ifup
inetd
init
inotifyd
insmod
install
ionice
iostat
ip
ipaddr
ipcalc
ipcrm
ipcs
iplink
iproute
iprule
iptunnel
K:
Code:
kbd_mode
kill
killall
killall5
klogd
L:
Code:
less
linux32
linux64
linuxrc
ln
loadfont
loadkmap
logger
login
logname
logread
losetup
lpd
lpq
lpr
ls
lsattr
lsmod
lsof
lspci
lsusb
lzcat
lzma
lzop
lzopcat
M:
Code:
makedevs
makemime
man
md5sum
mdev
mesg
microcom
mkdir
mkdosfs
mke2fs
mkfifo
mkfs.ext2
mkfs.minix
mkfs.reiser
mkfs.vfat
mknod
mkpasswd
mkswap
mktemp
modinfo
modprobe
more
mount
mountpoint
mpstat
mt
mv
N:
Code:
nameif
nanddump
nandwrite
nbd-client
nc
netstat
nice
nmeter
nohup
nslookup
ntpd
O:
Code:
od
openvt
P:
Code:
passwd
patch
pgrep
pidof
ping
ping6
pipe_progress
pivot_root
pkill
pmap
popmaildir
poweroff
powertop
printenv
printf
ps
pscan
pstree
pwd
pwdx
R:
Code:
raidautorun
rdate
rdev
readlink
readprofile
realpath
reboot
reformime
remove-shell
renice
reset
resize
rev
rfkill
rm
rmdir
rmmod
route
rpm
rpm2cpio
rtcwake
run-parts
runsv
runsvdir
rx
S:
Code:
script
scriptreplay
sed
sendmail
seq
setarch
setconsole
setfont
setkeycodes
setlogcons
setserial
setsid
setuidgid
sha1sum
sha256sum
sha3sum
sha512sum
showkey
slattach
sleep
smemcap
softlimit
sort
split
start-stop-daemon
stat
strings
stty
su
sulogin
sum
sv
svlogd
swapoff
swapon
switch_root
sync
sysctl
syslogd
T:
Code:
tac
tail
tar
taskset
tcpsvd
tee
telnet
telnetd
test
tftp
tftpd
time
timeout
top
touch
tr
traceroute
traceroute6
true
tty
ttysize
tunctl
tune2fs
U:
Code:
ubiattach
ubidetach
ubimkvol
ubirmvol
ubirsvol
ubiupdatevol
udhcpc
udhcpc6
udhcpd
udpsvd
umount
uname
uncompress
unexpand
uniq
unix2dos
unlzma
unlzop
unxz
unzip
uptime
usleep
uudecode
uuencode
V:
Code:
vconfig
vi
vlock
volname
W:
Code:
watch
watchdog
wc
wget
which
whoami
whois
X:
Code:
xargs
xz
xzcat
Y:
Code:
yes
Z:
Code:
zcat
zcip
--- Happy Hunting!
Sent from my K2_CL using Tapatalk
As you all can see, this version is freakin loaded with possibilities. The other ones I used don't even come close to comparing to this version.
Sent from my K2_CL using Tapatalk
By the way, it comes with VI
Don't play with it unless you know how - could cause some serious damage lol.
Sent from my K2_CL using Tapatalk
Play Store Busybox Installer
Hi,
We could possible install following app from play store and perform busybox installation with ease.
Goto google play store and search for "Busybox X", author Robert Nediyakalaparambil [root].
I have tried myself and it works, found sendmail command which missing from previous installer.
Cheers! :victory:
donchai said:
Hi,
We could possible install following app from play store and perform busybox installation with ease.
Goto google play store and search for "Busybox X", author Robert Nediyakalaparambil [root].
I have tried myself and it works, found sendmail command which missing from previous installer.
Cheers! :victory:
Click to expand...
Click to collapse
Or we could just install this busybox, and a quick note:
For me, after flashing this busybox, su binary botched, Supersu couldn't reinstall it.
So I rigged up a flashable zip so that won't happen anymore, also bash is no longer symlinked to sh
https://db.tt/CvZQjsSC
Sent from above using Xparent Tapatalk
Bump this badass busybox
Sent from above using Xparent Tapatalk Blue
Deleted
Modding.MyMind said:
By the way, it comes with VI
Don't play with it unless you know how - could cause some serious damage lol.
Sent from my K2_CL using Tapatalk
Click to expand...
Click to collapse
I prefer nano so it doesn't really matter to me.
These are a downstream distribution of the "suckless" binaries found at http://git.2f30.org/
They can be used as improved shell or in your application, root or otherwise.
A more reliable way to run native functionality than through Busybox.
For more information, access to source code and binaries, I suggest you head to http://fusion.github.io/sbase-for-android/
Here is a list of binaries currently available, source code included -- MIT license:
basename cal cat chgrp chmod chown chroot cksum cmp col cols comm cp cron
cut date dirname du echo env expand expr false find fold grep head kill
link ln logname ls md5sum mkdir mkfifo mktemp mv nice nl nohup paste
printenv printf pwd readlink renice rm rmdir sed seq setsid sha1sum
sha256sum sha512sum sleep sort split sponge strings sync tail tar tee
test time touch tr true tty uname unexpand uniq unlink uudecode uuencode
wc xargs yes
clear df dmesg halt id
lsusb mknod mkswap pagesize pidof respawn stat
sysctl truncate watch
Click to expand...
Click to collapse
Hi,
I'd like to un-pack my boot.img, but I've never done something like this before. Wishing to fix my Android device from 2010, a Creative ZEN Touch 2. It was my first Android device, and I'd like to fix it for knowledge and challenge, even thought it's old.
You can skip the part in blue to jump straight to the problem, but you would skip information about the actual device.
The device does not have any custom ROM developped for it, and no custom recoveries either - nothing exists. You would have to compile these yourself, something that I would wish to try eventually (Too hard). No flashing tools for this device exists either (Odin, or anything). So actually, if something goes wrong and you soft-brick/bootloop, you're screwed (Actually it does bootloop sometimes, randomly. But it's still booting sometimes). There is Android Recovery 3e, but it's useless. You could wipe /Data or /Cache, but you can't flash anything, unless it's signed (Tried to sign my update.zip with AndroidKitchen. Seems like it did worked, but Android Recovery 3e still reject it somehow).
So I would love to install Clockworkmod on it, so that way I would have a effective recovery method if something goes wrong. But before attempting to compile CWM (Look hard...), I thought I could get ADB to work. Since the manufacturer, Creative, does not encourage self-repair, it seems like they intentionally blocked ADB from default.prop (OMG... >__< ). I'd like to re-enable it first so I could get an extra repair tool (And typing all the commands on the terminal emulator on the small screen, horrible).
Yes, the device is rooted, since 2010, using Z4Root for Froyo.
GameX2 said:
USB debugging is definitely enabled, and the device driver is also installed (Not even sure if I had to install a driver for this 2011 device in first place. Device is detected by computer without a problem).
If I type:
Code:
adb devices
The output is just: "List of devices attached" with a blank line.
If I try:
Code:
adb shell
This show up:
Code:
error: device not found
I can tell that ADB is working with 2 more devices.
Click to expand...
Click to collapse
Here is the content of default.prop:
Code:
#
# ADDITIONAL_DEFAULT_PROPERTIES
#
ro.secure=1
ro.allow.mock.location=0
ro.debuggable=0
persist.service.adb.enable=0
I was told that to fix ADB, I should edit default.prop like this, but to properly edit it, I should unpack and repack boot.img:
Code:
ro.secure=1
ro.allow.mock.location=0
ro.debuggable=1
persist.sys.usb.config=mass_storage,adb
persist.service.adb.enable=1
Here's also the content of my init.rc file:
Code:
on init
sysclktz 0
loglevel 3
# setup the global environment
export PATH /sbin:/system/sbin:/system/bin:/system/xbin
export LD_LIBRARY_PATH /system/lib
export ANDROID_BOOTLOGO 1
export ANDROID_ROOT /system
export ANDROID_ASSETS /system/app
export ANDROID_DATA /data
export EXTERNAL_STORAGE /mnt/sdcard
export EXTERNAL_STORAGE_SD /mnt/sdcard
export EXTERNAL_STORAGE_UDISK /mnt/udisk
export EXTERNAL_STORAGE_EXTSD /mnt/extsd
export ASEC_MOUNTPOINT /mnt/asec
export SHM_MOUNTPOINT /mnt/shm
export BOOTCLASSPATH /system/framework/core.jar:/system/framework/ext.jar:/system/framework/framework.jar:/system/framework/android.policy.jar:/system/framework/services.jar
export BACKLIGHT_PATH /sys/class/backlight/tps60250/brightness
export MAX_BACKLIGHT_PATH /sys/class/backlight/tps60250/max_brightness
export VPU_FW_PATH /system/lib/firmware/vpu
export CODEC_SHM_PATH /mnt/shm
export GST_PLUGIN_PATH /system/lib/gst_plugins
export CORE_REGISTER_FILE /system/etc/core_register
export COMPONENT_REGISTER_FILE /system/etc/component_register
export CONTENTPIPE_REGISTER_FILE /system/etc/contentpipe_register
export BUILD_TARGET earlgrey
export LOG_LEVEL 0
# Backward compatibility
symlink /system/etc /etc
symlink /sys/kernel/debug /d
# create mountpoints
# mkdir /mnt 0775 root system
# mkdir /mnt/sdcard 0000 system system
# mkdir /mnt/udisk 0000 system system
# mkdir /mnt/extsd 0000 system system
# Create cgroup mount point for cpu accounting
mkdir /acct
mount cgroup none /acct cpuacct
mkdir /acct/uid
# Backwards Compat - XXX: Going away in G*
symlink /mnt/sdcard /sdcard
symlink /mnt/extsd /extsd
symlink /mnt/udisk /udisk
# mkdir /system
# mkdir /data 0771 system system
mkdir /cache 0770 system cache
mkdir /config 0500 root root
# Directory for putting things only root should see.
mkdir /mnt/secure 0700 root root
# Directory for staging bindmounts
mkdir /mnt/secure/staging 0700 root root
# Directory-target for where the secure container
# imagefile directory will be bind-mounted
mkdir /mnt/secure/asec 0700 root root
# Secure container public mount points.
mkdir /mnt/asec 0700 root system
mount tmpfs tmpfs /mnt/asec mode=0755,gid=1000
# shared memory used by middleware
mkdir /mnt/shm 0777 system graphics
mount tmpfs tmpfs /mnt/shm mode=0777,uid=1000,gid=1003,size=1m
#mount rootfs rootfs / ro remount
#mkdir /factory 0751 system system
mount tmpfs tmpfs /factory size=131072
write /proc/sys/kernel/panic_on_oops 1
write /proc/sys/kernel/hung_task_timeout_secs 0
write /proc/cpu/alignment 4
write /proc/sys/kernel/sched_latency_ns 10000000
write /proc/sys/kernel/sched_wakeup_granularity_ns 2000000
write /proc/sys/kernel/sched_compat_yield 1
write /proc/sys/kernel/sched_child_runs_first 0
# Create cgroup mount points for process groups
mkdir /dev/cpuctl
mount cgroup none /dev/cpuctl cpu
chown system system /dev/cpuctl
chown system system /dev/cpuctl/tasks
chmod 0777 /dev/cpuctl/tasks
write /dev/cpuctl/cpu.shares 1024
mkdir /dev/cpuctl/fg_boost
chown system system /dev/cpuctl/fg_boost/tasks
chmod 0777 /dev/cpuctl/fg_boost/tasks
write /dev/cpuctl/fg_boost/cpu.shares 1024
mkdir /dev/cpuctl/bg_non_interactive
chown system system /dev/cpuctl/bg_non_interactive/tasks
chmod 0777 /dev/cpuctl/bg_non_interactive/tasks
# 5.0 %
write /dev/cpuctl/bg_non_interactive/cpu.shares 52
# Set permission for FSL device node
chmod 0777 /dev/mxc_vpu
# allow access to uart port for gps module
chmod 0777 /dev/ttymxc0
chmod 0777 /dev/ttymxc1
chmod 0777 /dev/ttymxc2
# for lcd driver work mode control
chown system system /dev/ili9481
chmod 0771 /dev/ili9481
# mount ext4 partitions
# Mount /system rw first to give the filesystem a chance to save a checkpoint
mount ext4 /dev/block/mmcblk0p2 /system
mount ext4 /dev/block/mmcblk0p2 /system rw remount
chmod 0555 /system/etc/install-recovery.sh
mount ext4 /dev/block/mmcblk0p5 /data nosuid nodev
chown system system /data
chmod 0771 /data
exec /system/etc/init.first_time.sh
mount ext4 /dev/block/mmcblk0p2 /system ro remount
# We chown/chmod /data again so because mount is run as root + defaults
mount ext4 /dev/block/mmcblk0p5 /data nosuid nodev
chown system system /data
chmod 0771 /data
# Create dump dir and collect dumps.
# Do this before we mount cache so eventually we can use cache for
# storing dumps on platforms which do not have a dedicated dump partition.
mkdir /data/dontpanic
chown root log /data/dontpanic
chmod 0750 /data/dontpanic
mkdir /data/synergy
chown root log /data/synergy
chmod 0777 /data/synergy
# Collect apanic data, free resources and re-arm trigger
copy /proc/apanic_console /data/dontpanic/apanic_console
chown root log /data/dontpanic/apanic_console
chmod 0640 /data/dontpanic/apanic_console
copy /proc/apanic_threads /data/dontpanic/apanic_threads
chown root log /data/dontpanic/apanic_threads
chmod 0640 /data/dontpanic/apanic_threads
write /proc/apanic_console 1
# Same reason as /data above
mount ext4 /dev/block/mmcblk0p6 /cache nosuid nodev
chown system cache /cache
chmod 0770 /cache
# This may have been created by the recovery system with odd permissions
chown system cache /cache/recovery
chmod 0770 /cache/recovery
#change permissions on vmallocinfo so we can grab it from bugreports
chown root log /proc/vmallocinfo
chmod 0440 /proc/vmallocinfo
#change permissions on kmsg & sysrq-trigger so bugreports can grab kthread stacks
chown root system /proc/kmsg
chmod 0400 /proc/kmsg
chown root system /proc/sysrq-trigger
chmod 0220 /proc/sysrq-trigger
# create basic filesystem structure
mkdir /data/misc 01771 system misc
mkdir /data/misc/bluetoothd 0770 bluetooth bluetooth
mkdir /data/misc/bluetooth 0770 system system
mkdir /data/misc/keystore 0700 keystore keystore
mkdir /data/misc/vpn 0770 system system
mkdir /data/misc/systemkeys 0700 system system
mkdir /data/misc/vpn/profiles 0770 system system
# give system access to wpa_supplicant.conf for backup and restore
mkdir /data/misc/wifi 0770 wifi wifi
chmod 0770 /data/misc/wifi
chmod 0660 /data/misc/wifi/wpa_supplicant.conf
mkdir /data/local 0771 shell shell
mkdir /data/local/tmp 0771 shell shell
mkdir /data/data 0771 system system
mkdir /data/app-private 0771 system system
mkdir /data/app 0771 system system
mkdir /data/property 0700 root root
mkdir /data/version 0770 root root
# create dalvik-cache and double-check the perms
mkdir /data/dalvik-cache 0771 system system
chown system system /data/dalvik-cache
chmod 0771 /data/dalvik-cache
# create the lost+found directories, so as to enforce our permissions
mkdir /data/lost+found 0770
mkdir /cache/lost+found 0770
# double check the perms, in case lost+found already exists, and set owner
chown root root /data/lost+found
chmod 0770 /data/lost+found
chown root root /cache/lost+found
chmod 0770 /cache/lost+found
# change permission for keymap file temporarily
# should be removed when working out keymap later
chmod 0777 /system/usr/keychars/qwerty.kcm.bin
chmod 0777 /system/usr/keychars/Dell_Dell_USB_Keyboard.kcm.bin
chmod 0777 /system/usr/keychars/mxckpd.kcm.bin
chmod 0777 /system/usr/keychars/gpio-keys.kcm.bin
chmod 0777 /system/usr/keychars/mxc_ts-keypad.kcm.bin
chmod 0777 /system/usr/keychars/mxc_power_key.kcm.bin
chmod 0777 /system/usr/keychars/AVRCP.kcm.bin
chmod 0777 /sys/class/graphics/fb0/fsl_disp_property
chmod 0777 /sys/class/graphics/fb1/fsl_disp_property
on boot
# basic network init
ifup lo
hostname localhost
domainname localdomain
mkdir /data/system 0775 system system
#exec /sbin/ts_calibrator
exec system/xbin/flash.dump.sh
# set RLIMIT_NICE to allow priorities from 19 to -20
setrlimit 13 40 40
# Define the oom_adj values for the classes of processes that can be
# killed by the kernel. These are used in ActivityManagerService.
setprop ro.FOREGROUND_APP_ADJ 0
setprop ro.VISIBLE_APP_ADJ 1
setprop ro.SECONDARY_SERVER_ADJ 2
setprop ro.BACKUP_APP_ADJ 2
setprop ro.HOME_APP_ADJ 4
setprop ro.HIDDEN_APP_MIN_ADJ 7
setprop ro.CONTENT_PROVIDER_ADJ 14
setprop ro.EMPTY_APP_ADJ 15
# Define the memory thresholds at which the above process classes will
# be killed. These numbers are in pages (4k).
setprop ro.FOREGROUND_APP_MEM 1536
setprop ro.VISIBLE_APP_MEM 2048
setprop ro.SECONDARY_SERVER_MEM 4096
setprop ro.BACKUP_APP_MEM 4096
setprop ro.HOME_APP_MEM 4096
setprop ro.HIDDEN_APP_MEM 5120
setprop ro.CONTENT_PROVIDER_MEM 5632
setprop ro.EMPTY_APP_MEM 6144
# Write value must be consistent with the above properties.
# Note that the driver only supports 6 slots, so we have HOME_APP at the
# same memory level as services.
write /sys/module/lowmemorykiller/parameters/adj 0,1,2,7,14,15
write /proc/sys/vm/lowmem_reserve_ratio 1
write /proc/sys/vm/overcommit_memory 1
write /proc/sys/vm/min_free_order_shift 4
write /sys/module/lowmemorykiller/parameters/minfree 1536,2048,4096,5120,5632,6144
# Set init its forked children's oom_adj.
write /proc/1/oom_adj -16
# Tweak background writeout
write /proc/sys/vm/dirty_expire_centisecs 200
write /proc/sys/vm/dirty_background_ratio 5
# Permissions for System Server and daemons.
chown radio system /sys/android_power/state
chown radio system /sys/android_power/request_state
chown radio system /sys/android_power/acquire_full_wake_lock
chown radio system /sys/android_power/acquire_partial_wake_lock
chown radio system /sys/android_power/release_wake_lock
chown radio system /sys/power/state
chown radio system /sys/power/wake_lock
chown radio system /sys/power/wake_unlock
chmod 0660 /sys/power/state
chmod 0660 /sys/power/wake_lock
chmod 0660 /sys/power/wake_unlock
#chown system system /sys/class/timed_output/vibrator/enable
chown system system /sys/class/leds/keyboard-backlight/brightness
chown system system /sys/class/leds/lcd-backlight/brightness
chown system system /sys/class/leds/button-backlight/brightness
chown system system /sys/class/leds/jogball-backlight/brightness
chown system system /sys/class/leds/red/brightness
chown system system /sys/class/leds/green/brightness
chown system system /sys/class/leds/blue/brightness
chown system system /sys/class/leds/red/device/grpfreq
chown system system /sys/class/leds/red/device/grppwm
chown system system /sys/class/leds/red/device/blink
chown system system /sys/class/leds/red/brightness
chown system system /sys/class/leds/green/brightness
chown system system /sys/class/leds/blue/brightness
chown system system /sys/class/leds/red/device/grpfreq
chown system system /sys/class/leds/red/device/grppwm
chown system system /sys/class/leds/red/device/blink
#chown system system /sys/class/timed_output/vibrator/enable
chown system system /sys/class/haptic/oneshot
chown system system /sys/module/sco/parameters/disable_esco
chown system system /sys/kernel/ipv4/tcp_wmem_min
chown system system /sys/kernel/ipv4/tcp_wmem_def
chown system system /sys/kernel/ipv4/tcp_wmem_max
chown system system /sys/kernel/ipv4/tcp_rmem_min
chown system system /sys/kernel/ipv4/tcp_rmem_def
chown system system /sys/kernel/ipv4/tcp_rmem_max
chown root radio /proc/cmdline
# Chmod/chown FSL specific sys entry
chown radio system /sys/devices/platform/mxc_dvfs_core.0/enable
chown radio system /sys/devices/platform/busfreq.0/enable
chown system system /sys/class/backlight/tps60250/brightness
chmod 0660 /sys/devices/platform/mxc_dvfs_core.0/enable
chmod 0660 /sys/devices/platform/busfreq.0/enable
chmod 0660 /sys/class/backlight/tps60250/brightness
write /sys/devices/platform/busfreq.0/enable 1
write /sys/devices/platform/mxc_dvfs_core.0/enable 1
# allow control power for ecompass and gsensor
chown system system /sys/class/i2c-adapter/i2c-0/0-001c/akm8973_ctl
chmod 0777 /sys/class/i2c-adapter/i2c-0/0-001c/akm8973_ctl
#chown system system /sys/class/i2c-adapter/i2c-0/0-001d/power_ctl
#chmod 0777 /sys/class/i2c-adapter/i2c-0/0-001d/power_ctl
# for GPS gpio driver for gps power and bootmode control
chown system system /dev/gps_gpio
chown system system /sys/devices/virtual/gps/gps_gpio/gps_power
chown system system /sys/devices/virtual/gps/gps_gpio/gps_bootmode
chmod 0771 /dev/gps_gpio
chmod 0660 /sys/devices/virtual/gps/gps_gpio/gps_power
chmod 0771 /sys/devices/virtual/gps/gps_gpio/gps_bootmode
# for Sensor HAL
chown system system /dev/accel
chown system system /dev/akm8973_dev
chown system system /dev/akm8973_aot
chmod 0777 /dev/accel
chmod 0777 /dev/akm8973_dev
chmod 0777 /dev/akm8973_aot
# Define TCP buffer sizes for various networks
# ReadMin, ReadInitial, ReadMax, WriteMin, WriteInitial, WriteMax,
setprop net.tcp.buffersize.default 4096,87380,110208,4096,16384,110208
setprop net.tcp.buffersize.wifi 4095,87380,110208,4096,16384,110208
setprop net.tcp.buffersize.umts 4094,87380,110208,4096,16384,110208
setprop net.tcp.buffersize.edge 4093,26280,35040,4096,16384,35040
setprop net.tcp.buffersize.gprs 4092,8760,11680,4096,8760,11680
# Set property for FSL specific feature
# Init second display connection state
setprop rw.SECOND_DISPLAY_CONNECTED 0
# Define gst player property
setprop media.gstreamer.enable-player 0
# Comment the usage of stageflight media framework
setprop media.stagefright.enable-scan 0
setprop media.stagefright.enable-player 0
setprop media.stagefright.enable-record 0
setprop media.stagefright.enable-http 0
setprop media.stagefright.enable-meta 0
# Define fsl avi/aac/asf/mkv/flv/flac format support
setprop ro.FSL_AVI_PARSER 1
setprop ro.FSL_AAC_PARSER 1
setprop ro.FSL_ASF_PARSER 1
setprop ro.FSL_FLV_PARSER 1
setprop ro.FSL_MKV_PARSER 1
setprop ro.FSL_FLAC_PARSER 1
# Define fsl display init mode
setprop ro.FSL_LANDSCAPE_MODE 1
# Define fsl xec mode
setprop xec.dls.enabled 1
setprop xec.aa.enabled 1
setprop xec.dls.rate 0
setprop xec.aa.rate 100
# Define fsl dvfs property
setprop ro.dvfs.enabled 1
# Define UI to TVOUT,change this setting to 1 and uncomment below write commands
setprop ro.UI_TVOUT_DISPLAY 0
#write /sys/class/graphics/fb0/blank 1
#write /sys/class/graphics/fb1/blank 1
#write /sys/class/graphics/fb2/blank 1
#write /sys/class/graphics/fb0/fsl_disp_property 1-layer-fb
#write /sys/class/graphics/fb1/mode U:720x480i-60\n
#write /sys/class/graphics/fb1/blank 0
chown system system /sys/class/graphics/fb1/blank
chmod 0644 /sys/class/graphics/fb1/blank
chown system system /sys/class/graphics/fb1/mode
chmod 0644 /sys/class/graphics/fb1/mode
#chown system system /sys/devices/platform/mxc_sdc_fb.0/graphics/fb0/blank
#chmod 0644 /sys/devices/platform/mxc_sdc_fb.0/graphics/fb0/blank
# Define default notification_sound
setprop ro.config.notification_sound OnTheHunt.ogg
# for switch on/off framebuffer
chown system system /sys/devices/platform/mxc_sdc_fb.0/graphics/fb0/blank
chown system system /sys/devices/platform/mxc_sdc_fb.1/graphics/fb1/blank
chown system system /sys/devices/platform/mxc_sdc_fb.2/graphics/fb2/blank
chmod 0644 /sys/devices/platform/mxc_sdc_fb.0/graphics/fb0/blank
chmod 0644 /sys/devices/platform/mxc_sdc_fb.1/graphics/fb1/blank
chmod 0644 /sys/devices/platform/mxc_sdc_fb.2/graphics/fb2/blank
# ALSA mixer naming define
setprop alsa.mixer.playback.master Playback
setprop alsa.mixer.capture.master Capture
setprop alsa.mixer.playback.speaker Playback
setprop alsa.mixer.playback.headset Headphone
setprop alsa.mixer.capture.headset Capture
# Prepare for wifi
setprop wifi.interface wlan0
mkdir /data/misc/wifi/sockets 0770 wifi wifi
mkdir /data/misc/dhcp 0770 dhcp dhcp
chown dhcp dhcp /data/misc/dhcp
# DD partitions for diversity and ECD key region for access
chmod 0751 /factory
chown system system /factory
chmod 0777 /dev/block/mmcblk0
chmod 6777 /system/bin/dd
chown system system /system/bin/toolbox
exec /system/xbin/init.diversity.ecd.sh
# mount calibration data region
chown system system /dev/block/mmcblk0
chmod 0777 /dev/block/mmcblk0
chmod 0777 /sys/module/pd_ts13892/parameters/calibration
exec /system/xbin/init.calibration.sh
exec /system/bin/ts13892_calibrator
chmod 751 /system/xbin/flash_sync
# Prepare for bluetooth
# chown bluetooth bluetooth /sys/class/rfkill/rfkill0/type
# chmod 666 /sys/class/rfkill/rfkill0/state
# chown bluetooth bluetooth /sys/class/rfkill/rfkill0/state
# write /sys/class/rfkill/rfkill0/state 0
# Enable USB host1'remote wakeup event wakeup android system
# write /sys/bus/platform/drivers/fsl-ehci/fsl-ehci.1/power/wakeup enabled
# Prepare for RIL
setprop gsm.ril.delay 15
#change file permission for synergy
chown root shell /system/etc/synergy_fts.sh
chmod 0550 /system/etc/synergy_fts.sh
class_start default
## Daemon processes to be run by init.
##
service console /system/bin/sh
console
# adbd is controlled by the persist.service.adb.enable system property
service adbd /sbin/adbd
user root
group root
disabled
# adbd on at boot in emulator
#on property:ro.kernel.qemu=1
# start adbd
on property:persist.service.adb.enable=1
start adbd
on property:persist.service.adb.enable=0
stop adbd
service servicemanager /system/bin/servicemanager
user system
critical
onrestart restart zygote
onrestart restart media
service vold /system/bin/vold
socket vold stream 0660 root mount
ioprio be 2
service netd /system/bin/netd
socket netd stream 0660 root system
service dispd /system/bin/dispd
socket dispd stream 0660 root system
service debuggerd /system/bin/debuggerd
service ril-daemon /system/bin/rild -l /system/lib/libreference-ril.so -- -d /dev/ttyUSB3 -u /dev/ttyUSB0
socket rild stream 660 root radio
socket rild-debug stream 660 radio system
user root
group radio cache inet misc audio
service zygote /system/bin/app_process -Xzygote /system/bin --zygote --start-system-server
socket zygote stream 666
onrestart write /sys/android_power/request_state wake
onrestart write /sys/power/state on
onrestart restart media
service media /system/bin/mediaserver
user media
group system audio camera graphics inet net_bt net_bt_admin net_raw
ioprio rt 4
service bootanim /system/bin/bootanimation
user graphics
group graphics
disabled
oneshot
service dbus /system/bin/dbus-daemon --system --nofork
socket dbus stream 666 bluetooth bluetooth
user bluetooth
group bluetooth net_bt_admin
service bluetoothd /system/bin/bluetoothd -n
socket bluetooth stream 660 bluetooth bluetooth
socket dbus_bluetooth stream 660 bluetooth bluetooth
# init.rc does not yet support applying capabilities, so run as root and
# let bluetoothd drop uid to bluetooth with the right linux capabilities
group bluetooth net_bt_admin misc
disabled
service hcid /system/bin/hcid -s -n -f /etc/bluez/hcid.conf
socket bluetooth stream 660 bluetooth bluetooth
socket dbus_bluetooth stream 660 bluetooth bluetooth
# init.rc does not yet support applying capabilities, so run as root and
# let hcid drop uid to bluetooth with the right linux capabilities
group bluetooth net_bt_admin misc
disabled
service hciattach /system/bin/logwrapper /system/bin/sh /system/etc/mxc_bt.sh
user bluetooth
group bluetooth net_bt_admin
disabled
oneshot
service hfag /system/bin/sdptool add --channel=10 HFAG
user bluetooth
group bluetooth net_bt_admin
disabled
oneshot
service hsag /system/bin/sdptool add --channel=11 HSAG
user bluetooth
group bluetooth net_bt_admin
disabled
oneshot
service opush /system/bin/sdptool add --channel=12 OPUSH
user bluetooth
group bluetooth net_bt_admin
disabled
oneshot
service pbap /system/bin/sdptool add --channel=19 PBAP
user bluetooth
group bluetooth net_bt_admin
disabled
oneshot
service synergy_fts_init /system/etc/synergy_fts.sh
user root
group sdcard_rw
oneshot
service synergysdpops /system/etc/synergy_sdptool.sh 12 0x1105 ReservedOPPS
user root
disabled
oneshot
#service hidloopback /system/etc/insert-hiddrv.sh
# user root
# oneshot
service installd /system/bin/installd
socket installd stream 600 system system
service flash_recovery /system/etc/install-recovery.sh
oneshot
service racoon /system/bin/racoon
socket racoon stream 600 system system
# racoon will setuid to vpn after getting necessary resources.
group net_admin
disabled
oneshot
service mtpd /system/bin/mtpd
socket mtpd stream 600 system system
user vpn
group vpn net_admin net_raw
disabled
oneshot
service keystore /system/bin/keystore /data/misc/keystore
user keystore
group keystore
socket keystore stream 666
service dumpstate /system/bin/dumpstate -s
socket dumpstate stream 0660 shell log
disabled
oneshot
#service dhcpcd /system/bin/logwrapper /system/bin/dhcpcd -d -B wlan0
service dhcpcd /system/bin/dhcpcd -d -B wlan0
disabled
oneshot
service wpa_supplicant /system/bin/logwrapper /system/bin/wpa_supplicant \
-Dwext -iwlan0 -c/data/misc/wifi/wpa_supplicant.conf
user root
group wifi inet
socket wpa_wlan0 dgram 660 wifi wifi
oneshot
#service pppd_gprs /etc/init.gprs-pppd
#user root
#group radio cache inet misc
#disabled
#oneshot
service akmd2 /system/bin/akmd2
user system
group system
oneshot
# save diversity.bin from memory to emmc
service div_restore_m /system/bin/dd if=/factory/diversity.bin of=/dev/block/mmcblk0 obs=512 seek=14337 count=1
user root
group system
disabled
oneshot
# restore diversity.bin from diversity data
service div_restore_w /system/bin/dd if=/factory/diversity.master of=/dev/block/mmcblk0 obs=512 seek=14336 count=1
user root
group system
disabled
oneshot
# flash sync
service flash_sync /system/xbin/flash_sync
user root
group system
service synergy_exe /system/xbin/synergy_exe
user root
service a2dp_adapter /system/bin/csr_liba2dp_process
user root
group system audio camera graphics inet net_bt net_bt_admin
service flash_wifi /system/xbin/flash_wifi
disabled
oneshot
service wlan0_check /system/xbin/wlan0_check
disabled
oneshot
I've dumped several partitions, including /boot with romdump and dd:
Code:
dd if=/dev/bootimg of=/mnt/sdcard/boot.img bs=<your boot size> count=1
But I've never figured out the boot size correcly. Is this dangerous if I didn't entered the boot size, because I didn't knew was it is? As far as I know, my re-packed boot.img should be the same size, because I only have to edit default.prop, correct?
Then I've listed the partitions:
Code:
$cat /proc/mtd
dev: size erasesize name
$cat /proc/partitions
major minor #blocks name
179 0 7815168 mmcblk0
179 1 4309200 mmcblk0p1
179 2 154035 mmcblk0p2
179 3 1 mmcblk0p3
179 4 10395 mmcblk0p4
179 5 3145873 mmcblk0p5
179 6 41076 mmcblk0p6
$
Using the app "DiskInfo", I believe I've found which partition was /Boot. Here's what I see:
SD Card:
Mount points: /mnt/sdcard, /mnt/secure/asec (This is an INTERNAL SD card)
Partition name: mmcblk0p1
Total Space: 4.1GB
System:
Mount point: /system (ext4)
Partition Name: mmcblk0p2
Total Space: 128MB
???
Not mounted;
Partition name: mmcblk0p3
Total space: 1KB (What the hell? What is that partition??)
??? (Sound like Boot. But it does actually contain the JPEG files from Android Recovery 3e, so it does look like the /Recovery partition instead. While it DOES contain the default.prop file I'm looking for. But if this is /Recovery, where is /Boot ??? Just, not there, or the boot files are in the recovery partition as well?)
Not mounted;
Partition name: mmcblk0p4
Total space: 10,2MB
Data:
Mount point: /data (ext4)
Partition name: mmcblk0p5
Total space: 3GB (2,6GB free)
Cache:
Mount point: /cache (ext4)
Partition name: mmcblk0p6
Total space: 38,7MB (32,3 MB free)
TMPFS MOUNT POINTS:
/dev: Total space: 91,6MB, 12KB used
/mnt/asec: Total space: 91,6MB, 0KB used
/mnt/shm: Total space: 1MB, used: 20KB
/factory: Total space: 128KB, used: 64KB
/mnt/sdcard/.android_secure: Unknow size
***
POST TOO LONG - Next part in the next post
I've attached Boot (Or Recovery) .img to this post. Zipped the IMG in a ZIP file.
Part 2:
So I've dumped mmcblk0p4 using dd (Obviously, this device use non-standard NAND partitioning, huh). Note, I did not specified the boot size. I don't know if it's really important in that case, because I will only change a few lines from default.prop:
Code:
dd if=/dev/block/mmcblk0p4 /sdcard/boot.img
Worked.
But now, how do I unpack/repack this?
First, I've tried using this tool (Boot/Recovery Repack utils for Windows): http://forum.xda-developers.com/showthread.php?t=2036528
But dragging the boot.img file on MTK_unpack.bat returned:
Code:
[total hits/matching patterns/non-matching patterns]
warn : empty file: bin\off2.txt - skipping
0 files checked, 0 changed.
1 warnings occurred.
- size of "D:\DATA\ZEN Touch 2 [13-02-14]\BootRecoveryRepack\boot.img" 10644480 byte
- kernel offset -
- ram_header offset -
- ram_disk offset -
- extracting kernel_header...
- extracting kernel...
- extracting ram_header...
- extracting ram_disk...
error: end offset is lower than start offset
1 errors occurred.
- unpack ram_disk.gz...
- unpack ram_disk.cpio...
File not found
Unknown/Unrecognized command
Press any key to continue..
I then tried to drag boot.img on STD_unpack.bat instead:
Code:
[total hits/matching patterns/non-matching patterns]
warn : empty file: bin\off2.txt - skipping
0 files checked, 0 changed.
1 warnings occurred.
- pagesize - 4
ECHO command disabled
- size of image - 10644480 byte
- ram_disk offset - 4
- split kernel...
- extract ram_disk.gz...
10644476 bytes copied.
- unpack ram_disk.gz...
- unpack ram_disk.cpio...
File not found.
- copy source boot.img to unpacked folder (to keep source image)...
- done.
Press any key to continue...
Almost nothing was actually extracted. Boot.img remained compressed as IMG file.
And then I tried again, using AndroidKitchen this time, using the option to unpack Boot.img:
Code:
Creating folder /home/Carl/kitchen/bootimg_051515_193037 ...
---> Place boot.img/recovery.img into the folder mentioned above <--
Press Enter to continue
Code:
Android 'magic' header not found at start of boot.img
Checking if it exists elsewhere ...
[B][COLOR="Red"]Warning: Android header not found in boot.img (unsupported format)[/COLOR][/B]
Error: kernel offset (page size) is 0
Press Enter to continue
Now, what do I attempt next?
I don't have the skills to do all that on my own at this point. :/
Considering also that if we do a critical mistake, there is no possibility to recover from a soft-brick without Clockworkmod installed. I would first like to have at least ADB working.
Thank you very much!
EDIT: Is the bootloader locked? I honnestly have no idea, I've read that to check, you have to boot in Fastboot mode, and it's impossible to boot into Fastboot (Maybe it is on the phone somewhere, but I don't know. Just what I know for sure, is that the only key-combo access Recovery mode. Besides, the device have so few partititons, doubt Fastboot is there).
Considering the device is from 2010, do locked-bootloaders were THAT common, back then (I would say no, but just a guess) ?
Can someone help me with that, or point me to the right direction please?
Using AndroidKitchen, I sucessfully unpacked the Boot.img of my LG P500 phone, while I'm having a harder time unpacking the Boot.img of my Samsung Galaxy S4 for testing. Did worked for my LG P500, but I can't do it for this device, ZEN Touch 2, absolutely not on my own right now. Is this even possible, since the NAND partitioning is not standard? There has to be a way, huh?
Thank you very much - I can't seem to do that all on my own :/
I appreciate