[Android Software/Hacking General [Developers Only]] Sharpen3d:
Alright, after a week of screwing around with this thing and altering some processes to make more sense (in my opinion), I have finally achieved the permanent soft root on the SH-03C root! The good news is that, since Docomo has essentially dropped this phone, it's highly unlikely that this root option will ever be patched. The sad news (besides being droppped) is that we are still locked out of the /system area. We can see it, but we can't alter it. goroh_kun and company are still looking to see what else can be done, but the progress that's been made so far is pretty great.

To begin with, you need to download some things (Note: Steps 1 and 2 only for Windows machines. Macs can skip to 3):

1. Sh-03C USB driver. You probably already have it, but, if not, get it here. Install.

2. SH-03C adb/fastboot driver. This is to run in debug mode. Obtainable here. Also install.

3. rootkit. Grab it here, unzip and put the contents aside. I recommend a separate folder, like "rootkit_is03" or something.

4. Second root kit. Grab it here, unzip and put it in "rootkit_03c".

5. The root toggle apk. Available here. It will be the very last thing you need.

The following steps are taken directly from hiyoko's blog, so almost all the credit goes here for helping me understand what to do.

Start in your rootkit_is03 directory.

C:\User\xxxxxx>cd C:\rootkit_IS03

C:\rootkit_IS03>adb push data_local /data/local/

C:\rootkit_IS03>adb shell chmod 755 /data/local/is03break

C:\rootkit_IS03>adb shell chmod 755 /data/local/autoexec.sh

C:\rootkit_IS03>adb shell chmod 755 /data/local/busybox

C:\rootkit_IS03>adb install Superuser.apk

C:\rootkit_IS03>adb install jackpal.androidterm.apk

C:\rootkit_IS03>adb reboot

Alright, once the reboot is finished:

C:\rootkit_IS03>adb shell /data/local/is03break

[**] Gingerbreak/Honeybomb -- android 2.[2,3], 3.0 softbreak

[**] (C) 2010-2011 The Android Exploid Crew. All rights reserved.

[**] Kudos to jenzi, the #brownpants-party, the Open Source folks,

[**] Zynamics for ARM skills and Onkel Budi

途中略・・・・・・・

[!] dance forever my only one

If you get the error Cannot copy boomsh. : Permission denied, it means you've unsuccessfully ran the is03break exploit before. In that case:

C:\rootkit_IS03>adb shell

$ rm /data/local/tmp/boomsh

$ rm /data/local/tmp/sh

And run it again till you get the dance forever confirmation.

At this point, we have to cat the local.prop. Knowing nothing of unix, I have no idea why, but it's essential to making the root permanent(ish).

C:\rootkit_IS03>adb shell

$ /data/local/tmp/sh

# cd /data/local

# cat local.prop > /data/local.prop

The most important steps are now finished! The second half is quick and painless (though, if you're lucky, you didn't spend all week running is03break fruitlessly, and the first half was quick too).

Get into that second folder we made (rootkit_03c):

C:\rootkit_IS03>cd C:\rootkit_03C

C:\rootkit_03C>adb push data_local /data/local

C:\rootkit_03C>adb push local.prop /data/local.prop

C:\rootkit_03C>adb shell chmod 555 /data/local/autoexec.sh

C:\rootkit_03C>adb reboot

The very last step is to install the root toggle:

adb install IS03rootsw.apk

This application lets you turn root on and off effortlessly, so if you reboot, your root is never lost.

Now, my biggest issue is that, for some reason, installing the superuser and terminal borked my root process. What I did was I waited until after the is03break was successful THEN installed them. I may be a singular case. I recommend trying hiyoko's steps, and then changing them around if something doesn't go right.

What can we do now? Well, some apps (most notably Adfree) work right away. Some others need tweaking (Barnacle Wifi Tether mostly works) and others flat out don't just yet (root explorer can't modify any system apps, sadly). But for me, the most liberating thing was disabling some of the system apps. Not removing (not yet anyways) but just turning off awful things like promise mail, so they stopped using my system resources and BUGGING THE HELL OUTTA ME. The good folks at http://smartgoods.me posted this helpful how to which let me turn off almost everything. To make it short and sweet:

Turn on root

adb shell

pm disable com.twitter.android

pm disable jp.co.anchorz.android.pmail

pm disable jp.co.millmo.rota.apps.d.sh.book

pm disable jp.co.millmo.rota.apps.d.sh.media

pm disable jp.co.millmo.rota.widget.d.sh

pm disable jp.co.sharp.android.mixiappmanager

pm disable com.nttdocomo.android.phonebookcopy

pm disable com.dataviz.docstogo

pm disable com.google.android.apps.genie.geniewidget

pm disable com.nttdocomo.android.startupguide

pm disable jp.co.sharp.android.sharpwidget

And that takes care of everything on my list.

So, what do ya'll think?