[Motorola Droid RAZR] skeevydude:
Some Defy BL7 Root Scripts and /data idea

Just posting these Defy Root scripts. They worked for the Defy for its latest sbf that blocked all its other previous root exploits and hopefully they'll work for you as well.

I think that this one has the best chance. IF you're able to push busybox and use it to dd and add in su then you have a root solution, but it would require each user to make they're own custom fastboot image.

If I'm not mistaken, an earlier post said that /data wasn't checked for signature? IF you could dd /data (or just edit fastboot image and add in busybox and script) then you could add in an init script that takes a busybox added to /data, and use that to mount the system as rw and add in su and busybox to /xbin. That would work for all users.

Link to page with script zips

EDIT

If someone wants to upload the /data partition to Mediafire or similar GOOD filehost I'll edit it and insert busybox, su, and start on a script.

@echo off
cls
adb kill-server
adb wait-for-device
adb remount
adb push busybox /data/local/tmp
adb shell chmod 755 /data/local/tmp/busybox
adb shell data/local/tmp/busybox dd if=/dev/block/mmcblk1p21 of=/sdcard/mmcblk1p21-system.img
echo ÌáÈ¡ÖÐ£¬ÇëÉÔºó3·ÖÖÓ×óÓÒ£¬µÈÍê³ÉºóŒì²éSD¿šžùÄ¿ÂŒÊÇ·ñÓÐÌáÈ¡µÄimgŸµÏñ£¡
PAUSE

@echo off
cls
adb kill-server
adb wait-for-device
adb.exe shell mv /data/local/12m /data/local/12m.bak
adb.exe shell ln -s /data /data/local/12m
adb.exe reboot
adb.exe wait-for-device
adb shell rm -r /data/local/tmp
adb shell mkdir /data/local/tmp
adb push zergRush /data/local/tmp
adb shell chmod 755 /data/local/tmp/zergRush
adb shell /data/local/tmp/zergRush
adb wait-for-device
adb remount
adb.exe shell rm /data/local/12m
adb.exe shell mv /data/local/12m.bak /data/local/12m
adb.exe shell mv /data/local.prop /data/local.prop.bak
adb.exe shell "echo 'ro.sys.atvc_allow_netmon_usb=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_netmon_ih=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_res_core=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_res_panic=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_all_adb=1' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_all_core=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_efem=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_bp_log=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_ap_mot_log=0' >> /data/local.prop"
adb.exe shell "echo 'ro.sys.atvc_allow_gki_log=0' >> /data/local.prop"
adb.exe reboot recovery
echo »úÆ÷œøÈëRecoveryÄ£ÊœÖÐ£¬¿ŽŒûÌŸºÅºÍ»úÆ÷ÈËºó
echo Í¬Ê±°ŽÒôÁ¿ŒÓŒõ»œ³öAndroid system recovery
echo È»ºóÑ¡ÔñµÚÒ»ÏîÖØÆô£¬È»ºóÂíÉÏ°Ž×¡ÒôÁ¿ÉÏ£¬Òª¿ì
echo œøÈëBootloaderºóŸÍ¿ÉÒÔ£¬Èç¹ûÃ»ÓÐÇë¿ìËÙÒÆ³ýµç³Ø
echo ÖØÐÂ°Ñµç³Ø·ÅÈë°Ž×¡ÒôÁ¿ÉÏ¿ª»ú
echo Ä¿µÄÊÇÒªœøÈëbootloader£¬
echo Èç¹ûÒÑŸ*œøÈë²šÀË¶¯»*Õûžö²œÖèÇëÖØÍ·ÔÙÀŽ
echo œøÈëBootloaderºóË¢ÈëÑÇÌ«BL7µ×°ü
echo Ë¢Íêºó×Ô¶¯ÖØÆôµÈŽýROOTÍê³É×ÖÑù
adb wait-for-device
adb remount
adb push su /system/bin
adb shell chmod 4755 /system/bin/su
adb push Superuser.apk /system/app
adb push busybox /system/bin
adb shell chmod 666 /system/app/Superuser.apk
adb shell chmod 755 /system/bin/busybox
adb shell rm -r /data/local/tmp
adb shell mkdir /data/local/tmp
echo ROOTÍê³ÉÁË£¬¹§Ï²£¬ºØÏ²£¡ÏÖÔÚÄã¿ÉÒÔÐ°¶ñÁË£¡
PAUSE