[Miscellaneous Android Development] T_I:
Problem...

I tried the manual as given, but somehow the TAB450 will not let me be root. I even gave the 3 finger salute for the complete factory reset and tried with a clean environment, but no help there.

These were the commands I used, with their output:

root@dustpuppy:/tmp/Root_701# adb push GingerBreak /data/local/tmp/GingerBreak
418 KB/s (16830 bytes in 0.039s)
root@dustpuppy:/tmp/Root_701# adb push Superuser.apk /data/local/tmp/Superuser.apk
1295 KB/s (51004 bytes in 0.038s)
root@dustpuppy:/tmp/Root_701# adb push Vending.apk /data/local/tmp/Vending.apk
2220 KB/s (1857569 bytes in 0.817s)
root@dustpuppy:/tmp/Root_701# adb push su /data/local/tmp/su
640 KB/s (26232 bytes in 0.039s)
root@dustpuppy:/tmp/Root_701# adb shell
$ cd /data/local/tmp
$ chmod 700 GingerBreak
$ ./GingerBreak

[**] Gingerbreak/Honeybomb -- android 2.[2,3], 3.0 softbreak
[**] (C) 2010-2011 The Android Exploid Crew. All rights reserved.
[**] Kudos to jenzi, the #brownpants-party, the Open Source folks,
[**] Zynamics for ARM skills and Onkel Budi

[**] donate to 7-4-3-C@web.de if you like
[**] Exploit may take a while!

[+] Plain Gingerbread mode!
[+] Found system: 0xafd18015 strcmp: 0xafd37211
[+] Found PT_DYNAMIC of size 232 (29 entries)
[+] Found GOT: 0x00015358
[+] Using device /devices/platform/imapx200_sdi1.1/mmc_host/mmc1
[*] vold: 2004 GOT start: 0x00015358 GOT end: 0x00015398
[*] vold: 2004 idx: -2048 fault addr: 0x00014698
[+] fault address in range (0x00014698,idx=-2048)
[+] Calculated idx: -1232
[*] vold: 2770 idx: -0001232
[*] vold: 2770 idx: -0001231
[*] vold: 2770 idx: -0001230
[*] vold: 2770 idx: -0001229
[-] sendmsg() failed?
[*] vold: 2810 idx: -0001228
[*] vold: 2810 idx: -0001227
[*] vold: 2810 idx: -0001226
[*] vold: 2810 idx: -0001225
[*] vold: 2810 idx: -0001224
[*] vold: 2810 idx: -0001223

[!] dance forever my only one
# mount -o remount,rw /dev/block/mmcblk2p2 /system
# busybox cp su /system/bin/su
cp: cannot create '/system/bin/su': Permission denied

Files I used for this:

root@dustpuppy:/tmp# ls -al Android/
total 14406
drwxr-xr-x 2 nouser nogroup 1024 Mar 23 10:34 .
drwxr-xr-x 162 nouser nogroup 17408 Mar 23 09:51 ..
-rw-r--r-- 1 nouser nogroup 5817989 Mar 23 09:53 gapps-gb-20110307-signed.zip
-rw-r--r-- 1 nouser nogroup 47016 Mar 23 10:34 GingerBreak.tgz
-rw-r--r-- 1 nouser nogroup 7957638 Mar 23 09:52 Root_701.rar
root@dustpuppy:/tmp# ls -al Root_701/
total 5371
drwxr-xr-x 3 root root 1024 Mar 23 10:35 .
drwxrwxrwt 15 root root 3072 Mar 23 19:18 ..
-rw-r--r-- 1 root root 2540614 Apr 30 2010 adb.exe
-rw-r--r-- 1 root root 96256 May 4 2010 AdbWinApi.dll
-rw-r--r-- 1 root root 60928 May 4 2010 AdbWinUsbApi.dll
drwxr-xr-x 4 root root 1024 Oct 16 2010 FlashPlugin
-rw-r--r-- 1 root root 504460 Oct 16 2010 FlashPlugin.apk
-rwxr-xr-x 1 root root 16830 Mar 23 10:35 GingerBreak
-rw-r--r-- 1 root root 303933 Mar 23 10:12 GingerBreak-v1.20.apk
-rw-r--r-- 1 root root 270 Oct 16 2010 root&flashlite.bat
-rw-r--r-- 1 root root 26232 Jul 6 2010 su
-rw-r--r-- 1 root root 51004 Jul 8 2010 Superuser.apk
-rw-r--r-- 1 root root 1857569 Mar 23 10:11 Vending.apk

Checks performed on the shell:

# id
uid=2000(shell) gid=2000(shell) groups=1003(graphics),1004(input),1007(log),1009(mount),1011(adb),1015(sdcard_rw),3001(net_bt_admin),3002(net_bt),3003(inet)
# mount
rootfs / rootfs rw 0 0
tmpfs /dev tmpfs rw,relatime,mode=755 0 0
devpts /dev/pts devpts rw,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,relatime 0 0
tmpfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0
tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0
/dev/block/mmcblk2p2 /system ext3 rw,relatime,barrier=0,data=writeback 0 0
/dev/block/mmcblk2p3 /data ext3 rw,relatime,errors=continue,barrier=0,data=writeback 0 0
/dev/block/mmcblk2p5 /cache ext3 rw,nosuid,nodev,relatime,errors=continue,barrier=0,data=writeback 0 0
/dev/block/vold/179:17 /mnt/sdcard vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp936,iocharset=cp936,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/vold/179:17 /mnt/secure/asec vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp936,iocharset=cp936,shortname=mixed,utf8,errors=remount-ro 0 0
tmpfs /mnt/sdcard/.android_secure tmpfs ro,relatime,size=0k,mode=000 0 0
/dev/block/vold/179:9 /mnt/sdcard/sdcard1/p179-9 vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp936,iocharset=cp936,shortname=mixed,utf8,errors=remount-ro 0 0
/dev/block/vold/179:9 /mnt/sdcard/sdcard1/p179-9 vfat rw,dirsync,nosuid,nodev,noexec,relatime,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp936,iocharset=cp936,shortname=mixed,utf8,errors=remount-ro 0 0
# pwd
/data/local/tmp
# ls
GingerBreak
boomsh
Vending.apk
infotm_key
Superuser.apk
su
sh
# ps
USER PID PPID VSIZE RSS WCHAN PC NAME
root 1 0 328 188 c00a2c6c 0000875c S /init
root 2 0 0 0 c0054254 00000000 S kthreadd
root 3 2 0 0 c0045d58 00000000 S ksoftirqd/0
root 4 2 0 0 c0051224 00000000 S events/0
root 5 2 0 0 c0051224 00000000 S khelper
root 11 2 0 0 c00594f0 00000000 S async/mgr
root 12 2 0 0 c0051224 00000000 S pm
root 15 2 0 0 c0051224 00000000 S suspend
root 236 2 0 0 c007cf38 00000000 S sync_supers
root 238 2 0 0 c007d628 00000000 S bdi-default
root 240 2 0 0 c0051224 00000000 S kblockd/0
root 250 2 0 0 c01e6524 00000000 S khubd
root 253 2 0 0 c0216fec 00000000 S kseriod
root 262 2 0 0 c0051224 00000000 S kmmcd
root 273 2 0 0 c0051224 00000000 S cfg80211
root 357 2 0 0 c0051224 00000000 S rpciod/0
root 366 2 0 0 c0078234 00000000 S kswapd0
root 416 2 0 0 c0051224 00000000 S aio/0
root 424 2 0 0 c0051224 00000000 S nfsiod
root 429 2 0 0 c0051224 00000000 S crypto/0
root 1034 2 0 0 c0051224 00000000 S imapx200_ssim0.
root 1057 2 0 0 c0051224 00000000 S wusbd
root 1068 2 0 0 c020f450 00000000 S gadget
root 1074 2 0 0 c0213584 00000000 S file-storage
root 1083 2 0 0 c0051224 00000000 S pixcir_wq
root 1158 2 0 0 c0051224 00000000 S usbhid_resumer
root 1161 2 0 0 c0051224 00000000 S binder
root 1191 2 0 0 c02587cc 00000000 S mmcqd
root 1195 1 300 152 c00a2c6c 0000875c S /sbin/ueventd
root 1330 2 0 0 c02587cc 00000000 S mmcqd
root 1999 2 0 0 c00fc564 00000000 S kjournald
root 2000 2 0 0 c00b03f8 00000000 S flush-179:16
root 2001 2 0 0 c00fc564 00000000 S kjournald
root 2002 2 0 0 c00fc564 00000000 S kjournald
root 2003 1 752 300 c018c7a0 afd0b45c S /system/bin/sh
system 2005 1 824 260 c026ddb4 afd0b6fc S /system/bin/servicemanager
root 2006 1 3856 544 ffffffff afd0bdac S /system/bin/netd
radio 2008 1 3368 640 ffffffff afd0bdac S /system/bin/rild
root 2009 1 96304 27652 c00a2c6c afd0b844 S zygote
media 2010 1 37428 6624 ffffffff afd0b6fc S /system/bin/mediaserver
bluetooth 2011 1 1276 560 c00a2c6c afd0c59c S /system/bin/dbus-daemon
root 2012 1 832 324 c02f7840 afd0b45c S /system/bin/installd
keystore 2013 1 1764 420 c029bc20 afd0c0cc S /system/bin/keystore
root 2015 1 2920 332 ffffffff afd0c718 S /sbin/HDMI
root 2016 1 1092 452 ffffffff afd0bdac S /system/bin/usbdongled
root 2017 1 684 300 c00578b8 afd0bdac S /system/bin/permfd
root 2069 2 0 0 c00580f0 00000000 S galcore daemon
system 2081 2009 215780 35540 ffffffff afd0b6fc S system_server
app_11 2151 2009 114836 22668 ffffffff afd0c51c S com.android.inputmethod.latin
app_15 2164 2009 104076 14212 ffffffff afd0c51c S com.android.testcontroller
system 2167 2009 117256 21804 ffffffff afd0c51c S com.android.systemui
system 2168 2009 109300 14704 ffffffff afd0c51c S com.android.hdmiserviceIPC
app_36 2178 2009 135660 25036 ffffffff afd0c51c S com.android.launcher
system 2207 2009 116512 22660 ffffffff afd0c51c S com.android.settings
app_10 2236 2009 108068 19224 ffffffff afd0c51c S android.process.media
app_5 2260 2009 105808 17376 ffffffff afd0c51c S com.cooliris.media
app_8 2285 2009 104072 14828 ffffffff afd0c51c S com.cyanogenmod.android.fotakill
app_13 2292 2009 105468 16256 ffffffff afd0c51c S com.android.deskclock
app_19 2301 2009 106988 17728 ffffffff afd0c51c S com.android.email
app_31 2329 2009 107312 16264 ffffffff afd0c51c S com.google.android.partnersetup
app_6 2337 2009 120952 23696 ffffffff afd0c51c S com.google.process.gapps
app_32 2347 2009 108788 18784 ffffffff afd0c51c S getjar.android.client
app_35 2366 2009 104660 16520 ffffffff afd0c51c S com.android.providers.calendar
app_2 2379 2009 107484 15912 ffffffff afd0c51c S com.google.android.apps.uploader
root 2413 2 0 0 c00580f0 00000000 S RTKTHREAD
root 2414 1 2104 1064 c00a2c6c afd0b844 S /system/bin/wpa_supplicant
dhcp 2422 1 864 360 c00a2c6c afd0c59c S /system/bin/dhcpcd
dhcp 2433 1 868 380 c00a2c6c afd0c59c S /system/bin/dhcpcd
system 2464 2009 108056 15968 ffffffff afd0c51c S com.android.settings:remote
app_7 2503 2009 157624 58380 ffffffff afd0c51c S com.android.browser
app_30 2660 2009 105188 19680 ffffffff afd0c51c S com.android.packageinstaller
app_26 2668 2009 106152 15292 ffffffff afd0c51c S com.android.defcontainer
app_25 2679 2009 104064 14516 ffffffff afd0c51c S com.svox.pico
app_39 2693 2009 113632 27212 ffffffff afd0c51c S jackpal.androidterm
app_39 2700 2693 752 336 c0043bbc afd0c3ac S /system/bin/sh
app_39 2703 2700 74828 11988 ffffffff afd0c718 S app_process
app_39 2713 2693 752 336 c0043bbc afd0c3ac S /system/bin/sh
app_39 2737 2713 74828 11988 ffffffff afd0c718 S app_process
shell 2748 1 3416 172 ffffffff 00008294 S /sbin/adbd
shell 2760 2748 752 324 c0043bbc afd0c3ac S /system/bin/sh
root 2762 2760 752 336 c0043bbc afd0c3ac S /data/local/tmp/sh
root 2763 2 0 0 c00b03f8 00000000 S flush-179:8
root 2810 1 3888 556 ffffffff ffff0520 S /system/bin/vold
root 2897 1 684 256 c029bc20 afd0c0cc S /system/bin/debuggerd
root 2899 2762 908 308 00000000 afd0b45c R ps

It looks to me if the break did succeed, but partially. I can do the mount, but I can't copy the files. As if I'm only partially root. (or the mount is possible as the shell user)

I'm trying to root the device to learn more about it. (expecially why firefox and age of wind won't run and to gather enough info to attempt to build a custom rom myself)

I've tried with the just purchased 16 GB microSD erased (the micro sd being a requirement I miss in the manual btw) and this didn't help.

What did help was to set the directories /system/bin and /system/app to mode 777. Iy's dirty, but it seames to work, as there were no errors... except for the tab needing a very long time to boot the first time... a reset helped.