[Nexus 7 (2013) Q&A] tungdil:
Hello Tk-Glitch,

thanks a lot for your feedback and giving me the chance to learn something. I'll be happy to supply additional information:

The screen timeout in TWRP is not disabled but set to 300, and it is possible to hit the reboot button (or do something else before rebooting).

As mentioned I am using the ROM which Tassadar has packaged (lrx21p_flo.zip).

Yes! I did a fresh install, i.e. added another secondary ROM and stored the LOG. Note: I didn't touch the "options" during install so everything was as preset. After GlitchKernel I flashed SuperSU 2.19 and verified via adb shell that root is not working.

Contents of the log (mr_update.zip.log.txt):

AROMA Installer version 2.70RC2
(c) 2013 by amarullz xda-developers

ROM Name : Glitch kernel
ROM Version : N7-AOSP
ROM Author : Tk-Glitch
Device : Nexus 7 (2013)
Start at : Wed Nov 19 21:24:46 2014

installing samsung updater extensions
Installing Glitch kernel...
Extract: /tmp/buildconfig.sh
Extract: /tmp/busybox
Extract: /tmp/compatibility.sh
Extract: /tmp/compatibility2.sh
Extract: /tmp/glitch-settings.conf
Extract: /tmp/systemcheck.sh
Cleaning up
about to run program [/tmp/systemcheck.sh] with 1 args
Installing system files for real.
Extract: /system/bin/fstrim
Extract: /system/etc/init.d/99glitchsetup
about to run program [/tmp/buildconfig.sh] with 1 args
about to run program [/tmp/busybox] with 4 args
Fluxi's MSM Hotplug enabled
Renaming binaries...
/system/bin/mpdecision -> mpdecision_bck
/system/bin/thermald -> thermald_bck
about to run program [/tmp/compatibility.sh] with 1 args
Extract: /tmp/abootimg
Extract: /tmp/cmdline.cfg
Extract: /tmp/edit_ramdisk.sh
Extract: /tmp/edit_ramdisk_permissive.sh
Extract: /tmp/fstab.tmp
Extract: /tmp/glitch.zImage
Extract: /tmp/max_oc.sh
Extract: /tmp/restore.sh
Extract: /tmp/sepolicy.tmp
Applying init settings
about to run program [/tmp/busybox] with 4 args
32768+0 records in
32768+0 records out
16777216 bytes (16.0MB) copied, 0.472290 seconds, 33.9MB/s
about to run program [/tmp/abootimg] with 6 args
writing boot image config in /tmp/bootimg.cfg
extracting kernel in /tmp/zImage
extracting ramdisk in /tmp/initrd.img
about to run program [/tmp/max_oc.sh] with 1 args
about to run program [/tmp/edit_ramdisk.sh] with 1 args
2372 blocks
CIF hack found!
about to run program [/tmp/abootimg] with 9 args
reading config file /tmp/cmdline.cfg
reading kernel from /tmp/glitch.zImage
reading ramdisk from /tmp/initrd.img
Writing Boot Image /tmp/boot.img
Glitching your device...
about to run program [/tmp/busybox] with 4 args
32768+0 records in
32768+0 records out
16777216 bytes (16.0MB) copied, 0.952729 seconds, 16.8MB/s
Finished!
script result was [Finished!]

Installer Sucessfull (Status 0)

End at : Wed Nov 19 21:24:49 2014

Yes, of course. Here we go ... Note: I compared this fstab.flo with a version from a secondary ROM which has root. They are in fact identical!

# Android fstab file.
#<src> <mnt_point> <type> <mnt_flags and options> <fs_mgr_flags>
# The filesystem that contains the filesystem checker binary (typically /system) cannot
# specify MF_CHECK, and must come before any filesystems that do specify MF_CHECK

/dev/block/platform/msm_sdcc.1/by-name/system /system ext4 ro,barrier=1 wait
/dev/block/platform/msm_sdcc.1/by-name/cache /cache ext4 noatime,nosuid,nodev,barrier=1,data=ordered,nomblk_io_submit,errors=panic wait,check
/dev/block/platform/msm_sdcc.1/by-name/userdata /data ext4 noatime,nosuid,nodev,barrier=1,data=ordered,nomblk_io_submit,errors=panic wait,check,encryptable=/dev/block/platform/msm_sdcc.1/by-[CODE]

name/metadata

/dev/block/platform/msm_sdcc.1/by-name/persist /persist ext4 nosuid,nodev,barrier=1,data=ordered,nodelalloc wait

/dev/block/platform/msm_sdcc.1/by-name/boot /boot emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/recovery /recovery emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/misc /misc emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/sbl1 /sbl1 emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/sbl2 /sbl2 emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/sbl3 /sbl3 emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/tz /tz emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/rpm /rpm emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/aboot /aboot emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/sbl2b /sbl2b emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/sbl3b /sbl3b emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/tzb /tzb emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/rpmb /rpmb emmc defaults defaults

/dev/block/platform/msm_sdcc.1/by-name/abootb /abootb emmc defaults defaults

[/CODE]

Since Tassadar's boot image was working for me this was the easiest way. Just extract boot.img from lrx21p_flo.zip and use "delete and inject" for exchanging the boot image. Note: While writing this post I verified what I found yesterday, i.e. after flashing GlitchKernel and SuperSU 2.19 I do not have root. Flashing SuperSU 2.23 enables root. Reflashing Glitch and 2.19 leads to no-root again.

Best regards,

tungdil