ゲームにも飽きてきたのでzergRushでroot化して遊ぶ。もちろん自己責任で。
root化手順
- http://forum.xda-developers.com/showthread.php?t=1321582 からDooMLoRD_v3_ROOT-zergRush-busybox-su.zipをダウンロードして展開。
- 端末の設定を変更して「提供元不明のアプリ」を有効にする。(設定 > アプリケーション設定)
- 端末の設定を変更して「USBデバッグ」を有効にする。(設定 > アプリケーション設定 > 開発)
- PCと端末をUSBで接続して"runme.bat"を実行。
[C:...\Downloads\DooMLoRD_v3_ROOT-zergRush-busybox-su]runme.bat
---------------------------------------------------------------
Easy rooting toolkit (v3.0)
created by DooMLoRD
using exploit zergRush (Revolutionary Team)
Credits go to all those involved in making this possible!
---------------------------------------------------------------
[*] This script will:
(1) root ur device using latest zergRush exploit (16 Nov)
(2) install Busybox (1.18.4)
(3) install SU files (binary: 3.0.3 and apk: 3.0.6)
[*] Before u begin:
(1) make sure u have installed adb drivers for ur device
(2) enable "USB DEBUGGING"
from (Menu\Settings\Applications\Development)
(3) enable "UNKNOWN SOURCES"
from (Menu\Settings\Applications)
(4) [OPTIONAL] increase screen timeout to 10 minutes
(5) connect USB cable to PHONE and then connect to PC
(6) skip "PC Companion Software" prompt on device
---------------------------------------------------------------
CONFIRM ALL THE ABOVE THEN
Press any key to continue . . .
--- STARTING ----
--- WAITING FOR DEVICE
* daemon not running. starting it now *
* daemon started successfully *
--- cleaning
* daemon not running. starting it now *
ADB server didn't ACK
* failed to start daemon *
error: cannot connect to daemon
--- pushing zergRush"
1023 KB/s (23056 bytes in 0.022s)
--- correcting permissions
--- executing zergRush
[**] Zerg rush - Android 2.2/2.3 local root
[**] (C) 2011 Revolutionary. All rights reserved.
[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.
[+] Found a GingerBread ! 0x00015118
[*] Scooting ...
[*] Sending 149 zerglings ...
[+] Zerglings found a way to enter ! 0x10
[+] Overseer found a path ! 0x000151e0
[*] Sending 149 zerglings ...
[+] Zerglings caused crash (good news): 0x2abcccc4 0x0054
[*] Researching Metabolic Boost ...
[+] Speedlings on the go ! 0x6fd193d3 0x6fd39667
[*] Popping 24 more zerglings
[*] Sending 173 zerglings ...
[+] Rush did it ! It's a GG, man !
[+] Killing ADB and restarting as root... enjoy!
--- WAITING FOR DEVICE TO RECONNECT
if it gets stuck over here for a long time then try:
disconnect usb cable and reconnect it
toggle "USB DEBUGGING" (first disable it then enable it)
--- DEVICE FOUND
--- pushing busybox
2407 KB/s (1075144 bytes in 0.436s)
--- correcting permissions
--- remounting /system
--- copying busybox to /system/xbin/
2099+1 records in
2099+1 records out
1075144 bytes transferred in 0.350 secs (3071840 bytes/sec)
--- correcting ownership
--- correcting permissions
--- installing busybox
--- pushing SU binary
1085 KB/s (22228 bytes in 0.020s)
--- correcting ownership
--- correcting permissions
--- correcting symlinks
--- pushing Superuser app
2263 KB/s (785801 bytes in 0.339s)
--- cleaning
--- rebooting
ALL DONE!!!
Press any key to continue . . .
以上で、端末が自動で再起動される。アプリケーション一覧にSuperuserが追加されていれば成功。
root化のその後...
/systemをrwでリマウント
# mount -o rw,remount /dev/block/mtdblock0 /system
設定ファイルとか
- /system/build.prop
- カメラ無音化とか...
- /system/etc/hw_config.sh
- 輝度自動調整とか...
- /system/etc/
- etc以下にgps.confとかsensor.confとかおもしろそうなものが色々...
便利なandroid sdkコマンド
- adb shell
- 端末のシェルに接続
- adb pull
- 端末からPCへファイルを転送 ex) adb pull build.prop
- adb push
- PCから端末へファイルを転送 ex) adb push build.prop /mnt/sdcard
- adb remount
- systemをrwでリマウント
- adb reboot
- 端末の再起動
12/15 追記
4.0.2.A.0.61へのアップデートでZergRushの道は閉ざされました。別の方法でやるべし。