[Android General] utx:
No more rooting

I got the same in my new LG G3 D855 with the latest firmware (tested with the Linux version of send_command.exe qcdlcomm.py).

It seems that they patched it. Temp root still available, but it is much more limited. You have root, but write access only to /data and /cache and I see no way to change it:

# mount
rootfs / rootfs rw 0 0
tmpfs /dev tmpfs rw,seclabel,nosuid,relatime,size=1447412k,nr_inodes=84986,mode=755 0 0
devpts /dev/pts devpts rw,seclabel,relatime,mode=600 0 0
proc /proc proc rw,relatime 0 0
sysfs /sys sysfs rw,seclabel,relatime 0 0
selinuxfs /sys/fs/selinux selinuxfs rw,relatime 0 0
debugfs /sys/kernel/debug debugfs rw,relatime 0 0
/dev/block/platform/msm_sdcc.1/by-name/system /system ext4 ro,seclabel,noatime,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/userdata /data ext4 rw,seclabel,nosuid,nodev,noatime,noauto_da_alloc,resuid=1000,errors=continue,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/persist /persist ext4 ro,seclabel,nosuid,nodev,relatime,data=ordered 0 0
/dev/block/platform/msm_sdcc.1/by-name/cache /cache ext4 rw,seclabel,nosuid,nodev,noatime,data=ordered 0 0

Actually, I edited the script to get some debugging

Added:

exec > /proc/self/fd/$OUTFD
exec 2> /proc/self/fd/$OUTFD

removed non existing /system/toolbox references, removed redundant mount commands, and got:

ui_print *****************
ui_print SuperSU installer
ui_print *****************
ui_print - Mounting /system, /data and rootfs
mount: Permission denied
mount: Permission denied
/data/local/tmp/lg_root_my.sh[67]: can't create /system/toolbox: Read-only file system
Unable to open /system/toolbox: No such file or directory
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
2+0 records in
2+0 records out
2 bytes transferred in 0.001 secs (2000 bytes/sec)
3+0 records in
3+0 records out
3 bytes transferred in 0.001 secs (3000 bytes/sec)
12+0 records in
12+0 records out
12 bytes transferred in 0.001 secs (12000 bytes/sec)
3+0 records in
3+0 records out
3 bytes transferred in 0.001 secs (3000 bytes/sec)
/data/local/tmp/lg_root_my.sh[115]: /system/toolbox: not found
ui_print - Extracting files
/data/local/tmp/lg_root_my.sh[132]: /data/local/tmp/busybox: can't execute: Permission denied
ui_print - Disabling OTA survival
Unable to open /tmp/supersu/armv7/chattr.pie: No such file or directory
/data/local/tmp/lg_root_my.sh[136]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[137]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[138]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[139]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[140]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[141]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[142]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[143]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[144]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[145]: /tmp/supersu/armv7/chattr.pie: not found
/data/local/tmp/lg_root_my.sh[146]: /tmp/supersu/armv7/chattr.pie: not found
ui_print - Removing old files
mv: rename /system/bin/install-recovery.sh to /system/bin/install-recovery_original.sh: Read-only file system
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
rm: /system/bin/install-recovery.sh: Read-only file system
ui_print - Placing files
mkdir failed for /system/bin/.ext, Read-only file system
chown: /system/bin/.ext: No such file or directory
chown: /system/bin/.ext: No such file or directory
Unable to open /system/bin/.ext: No such file or directory
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
usage: chcon context path...
usage: chcon context path...
rm: /system/bin/.ext/.su: No such file or directory
rm: /system/xbin/su: No such file or directory
rm: /system/xbin/daemonsu: No such file or directory
rm: /system/xbin/sugote: No such file or directory
rm: /system/xbin/sugote-mksh: No such file or directory
/data/local/tmp/lg_root_my.sh[240]: can't create /system/xbin/sugote-mksh: Read-only file system
chown: /system/xbin/sugote-mksh: No such file or directory
chown: /system/xbin/sugote-mksh: No such file or directory
Unable to open /system/xbin/sugote-mksh: No such file or directory
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
usage: chcon context path...
usage: chcon context path...
rm: /system/xbin/supolicy: No such file or directory
rm: /system/lib/libsupol.so: No such file or directory
mkdir failed for /system/app/SuperSU, Read-only file system
chown: /system/app/SuperSU: No such file or directory
chown: /system/app/SuperSU: No such file or directory
Unable to open /system/app/SuperSU: No such file or directory
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
usage: chcon context path...
usage: chcon context path...
rm: /system/app/SuperSU/SuperSU.apk: No such file or directory
rm: /system/etc/install-recovery.sh: No such file or directory
ln: /system/bin/install-recovery.sh: File exists
ln: /system/bin/install-recovery.sh: File exists
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
rm: /system/bin/app_process: Read-only file system
ln: /system/bin/app_process: File exists
ln: /system/bin/app_process: File exists
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
mv: rename /system/bin/app_process32 to /system/bin/app_process32_original: Read-only file system
ln: /system/bin/app_process32: File exists
ln: /system/bin/app_process32: File exists
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
rm: /system/bin/app_process_init: No such file or directory
rm: /system/etc/init.d/99SuperSUDaemon: No such file or directory
/data/local/tmp/lg_root_my.sh[278]: can't create /system/etc/.installed_su_daemon: Read-only file system
chown: /system/etc/.installed_su_daemon: No such file or directory
chown: /system/etc/.installed_su_daemon: No such file or directory
Unable to open /system/etc/.installed_su_daemon: No such file or directory
/system/bin/toolbox: invalid option -- h
aaa
chcon: invalid option -- h
aaa
aaa
aaa
usage: chcon context path...
usage: chcon context path...
ui_print - Post-installation script
rm: /system/toolbox: No such file or directory
/data/local/tmp/lg_root_my.sh[283]: /system/xbin/su: not found
ui_print - Unmounting /system and /data
failed: Device or resource busy
failed: Device or resource busy
ui_print - Done !

Summary: Some tools are missing, /dev/block is removed during boot, remount fails, execution of busybox from /data as well.

Even worse, I tried mknod to re-create /system dev node. It fails on Permission denied as well:

/data/local/tmp/lg_backup_my.sh:

#!/sbin/sh
OUTFD=$2

exec > /proc/self/fd/$OUTFD
exec 2> /proc/self/fd/$OUTFD

SYSTEMLIB=/system/lib

LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox mknod /dev/mmcblk0p40 b 259 8
LD_LIBRARY_PATH=$SYSTEMLIB /system/bin/toolbox cat /dev/mmcblk0p40 >/data/local/tmp/mmcblk0p40.img

And the result:

# sh /data/local/tmp/lg_backup_my.sh dummy 1
Unable to create node: Permission denied
cat: /dev/mmcblk0p40: No such file or directory

My device:

LG G3 D855 32GB 3GB RAM

Android Version: 5.0

Android Sec Patch Level: 2015-11-01

Baseband Version: MPSS.DI.2.0.1.c1.13.2-00002-M8974AAAAANPZM-1

Kernel Version: 3.4.0

Build Number: LRX21R.A1445306351

Software version: V21a-EUR-XX