yashsingh1/xdaforums huggingface dataset:
[Fire HD 8 and HD 10 General] k4b4l:
Fire HD8 7th gen

I did following steps:

Install SuperSu from Playstore
adb push arm64/su arm64/supolicy arm64/libsupol.so /data/local/tmp
Follow directions from OP to get a root shell.
mount -o remount -rw /system

...and here I get stuck!

shell@douglas:/data/local/tmp # mount -o remount -rw /system
mount: Permission denied

How can I get rid of it? Whats wrong?

I achived root

255|shell@douglas:/data/local/tmp # id
uid=0(root) gid=0(root) groups=1003(graphics),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats) context=u:r:shell:s0

EDIT:

Made it!! Thank you all for your work! Donation on the way...

Solution

Uninstalled SuperSU from the device

Steps from the OP:

adb shell
cd /data/local/tmp
chmod 755 mtk-su
./mtk-su -v
WAIT until finished (you can check the result with "id" -> uid=0(root) gid=0(root) groups=0(root),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc) context=u:r:shell:s0)

mount -o remount -rw /system
cp /data/local/tmp/su /system/xbin/su
cp /data/local/tmp/su /system/xbin/daemonsu
cp /data/local/tmp/supolicy /system/xbin/
cp /data/local/tmp/libsupol.so /system/lib/
cp /data/local/tmp/libsupol.so /system/lib64/
chmod 0755 /system/xbin/su
chcon u:object_r:system_file:s0 /system/xbin/su
chmod 0755 /system/xbin/daemonsu
chcon u:object_r:system_file:s0 /system/xbin/daemonsu
daemonsu --auto-daemon

Installed SuperSU, Google Play Store...all fine :)

Installed Nova Launcher and started to remove amazon services/apps
[Fire HD 8 and HD 10 General] fire1951:
I have a Fire HD 8 7th gen 2017. I am considering using this method to obtain root. I have a question or two. I have the launcher hijack installed and have used the appwidget hack and have hidden the amazon apps using the facebook debug method. My question is, will any of this affect the obtaining of root or cause any other problems? And will I lose anything ( apps,etc), that is currently installed on the tablet? Thanks to each and every person that has contributed to this end result, it is greatly appreciated.
[Fire HD 8 and HD 10 General] ginfest:
Hi,

Thanks for this.

I get as far as "shell@douglas:/data/local/tmp $ ./mtk-su -v" then "/system/bin/sh: ./mtk-su: can't execute: Permission denied"

2017 Fire 8

Any ideas?
[Fire HD 8 and HD 10 General] teamfresno:
Did you skip this step before you tried that command?

chmod 755 mtk-su

Worked for me with no issues.
[Fire HD 8 and HD 10 General] ginfest:
Yes I did! Ty script running
[Fire HD 8 and HD 10 General] fire1951:
Am trying to root using the script . I get to "starting /system/bin/sh" then "root@douglas:/#_" and cannot enter or paste the commands from instructions2. The cursor just flashes and that's it. Please help!
[Fire HD 8 and HD 10 General] obvious:
Ctrl-v
[Fire HD 8 and HD 10 General] fire1951:
Thanks for the response Obvious, but that is not the problem, I had already tried that....it's like the batch file has not completed . I had to use a different version of adb.exe and the DLLs ( I am on Win XP)...could that be the problem?
[Fire HD 8 and HD 10 General] ginfest:
Success, thanks all :D
[Fire HD 8 and HD 10 General] Rortiz2:
Hmmm... very strange. Win XP !? Can you try it in windows 7, 8 or 10?
[Fire HD 8 and HD 10 General] fire1951:
Unfortunately no. Here's what the command window shows:

Microsoft Windows XP [Version 5.1.2600]

(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\D>cd c:\

C:\>C:\root-fire.bat

This script will root your fire. ONLY HD 8 2017 OR HD 8 2016

Do you want to continue?y/n:y

-------------------------------------------------------------------------------

[*] Pushing files and removing old files...

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

rm: data/local/tmp/mtk-su: No such file or directory

failed to copy 'arm64/su' to 'arm64/supolicy': No such file or directory

691 KB/s (22136 bytes in 0.031s)

[*] Setting permissions...

[*]Executing exploit...

wait until it finishes... When the exploit finishes, DON'T CLOSE THIS WINDOW

AND FOLOW THE INSTRUCTIONS2.txt

Building symbol table

kallsyms_addresses_pa 0x40b07200

kallsyms_num_syms 67967, addr_count 67967

kallsyms_names_pa 0x40b8bf00

Size of kallsyms_names 816989 bytes

kallsyms_markers_pa 0x40c53700

kallsyms_token_table_pa 0x40c54000

kallsyms_token_index_pa 0x40c54400

Patching credentials

init_task va: ffffffc000f16a20

Possible list_head tasks at offset 0x338

0xffffffc0030c8338 0xffffffc0165c3138 0x000000000000008c

comm offset 0x5a8 comm: swapper/0

Found own task_struct at node 0

real_cred: 0xffffffc0204f7880, cred: 0xffffffc0204f7880

New UID/GID: 0/0

Setting selinux permissive

Found adrp at offset 4

ADRP x0, base is 0xffffffc001086000

Found ldr at offset 28

LDR [x0,4092], selinux_enforce VA is 0xffffffc001086ffc

Switched selinux to permissive

starting /system/bin/sh

root@douglas:/ #
[Fire HD 8 and HD 10 General] Lochy19:
Working on Fire 8 HD 2016 with Fire OS 5.3.6.4, thank you so much!
[Fire HD 8 and HD 10 General] Rortiz2:
Okay. Tomorrow I will upload version 2 of the script to see if it works.

Enviado desde mi Aquaris M8 mediante Tapatalk
[Fire HD 8 and HD 10 General] THERAJ12:
Is there TWRP for HD 8 Gen7?
[Fire HD 8 and HD 10 General] lan78691:
Automated script route

Hey everyone,

sorry if this is a noob question but I am unable to get permanent root on Fire HD8 Version 2016 with the automated script (atleast I think). I download the zip file and unpack it. I used adb push to move the mtk-su file to data/local/tmp and then used adb shell to navigate to the tmp folder and run the file:

param1: 0x3000, param2: 0x10000, type: 1
Building symbol table
kallsyms_addresses pa 0x40afc100
kallsyms_num_syms 67998, addr_count 67998
kallsyms_names pa 0x40b80f00, size 817197
kallsyms_markers pa 0x40c48800
kallsyms_token_table pa 0x40c49100
kallsyms_token_index pa 0x40c49500
Patching credentials
init_task VA: 0xffffffc000f0aa20
Potential list_head tasks at offset 0x338
0xffffffc0030c8338 0xffffffc036c025b8 0x0000000000008c
comm swapper/0 at offset 0x5a8
Found own task_struct at node 0
real_cred VA: 0xffffffc00248a000
Parsing sel_read_enforce
ffffffc0002d923c+04: ADRP x0, 0xffffffc001062000
ffffffc0002d923c+1c: LDR [x0, 4092]
selinux_enforce VA: 0xffffffc001062ffc
Setting selinux_enforce
Selinux is already permissive
New UID/GID: 0/0
starting /system/bin/sh

It gets stuck there and my tablet restarts but I am not sure if actually got permanent root or not. I manually installed supersu app on my tablet (adb install supersu.apk) and opened it up but it says I don't have root. I also have a root checker app and that also shows I don't have root.

Should something else be printing out after starting/system/bin/sh message? Should it restart my tablet as it is currently? What am I doing wrong?

P.S. I am attempting this on a mac
[Fire HD 8 and HD 10 General] acr123:
Temp root for HD 8 (2018) - I'm close

I've now tried the manual way for temp root & I think I am very close. See below

c:\RootHD auto\files>adb.exe push mtk-su /data/local/tmp

adb server version (32) doesn't match this client (39); killing...

* daemon started successfully

mtk-su: 1 file pushed. 1.0 MB/s (34312 bytes in 0.031s)

c:\RootHD auto\files>adb shell

karnak:/ $ cd /data/local/temp

/system/bin/sh: cd: /data/local/temp: No such file or directory

2|karnak:/ $ cd data/local/tmp

karnak:/data/local/tmp $ chmod 755 mtk-su

karnak:/data/local/tmp $ ./mtk-su

UID: 0 cap: 3fffffffff selinux: permissive

karnak:/data/local/tmp #

After this I went to playstore and installed SuperSu. When I opened SuperSu it said there was NO ROOT. Could someone give me simple instructions to correctly install SuperSu

Thanks,

Al
[Fire HD 8 and HD 10 General] diplomatic:
mtk-su does not install permanent root. You have to push SuperSU files and run its installer to end up with app root access. Also, where did you get that mtk-su from? That is a super old version. Please download the latest release 18 and try again.

Same concern as above: mtk-su does not install permanent root access. Moreover, you can't hotwire SuperSU onto karnak like you can on Fire OS 5 tablets. (Same reason that the automated root script failed.) To get managed root access, you either have to use the bootless Mediatek root or unlock the bootloader and install Magisk.
[Fire HD 8 and HD 10 General] Chahk:
Fire HD8 2018.

Getting the following error trying to use the arm version (not arm64) of latest version of mtk-su r18 on Ubuntu (via Windows 10 Linux subsystem):

karnak:/data/local/tmp $ ./mtk-su -v
armv8l machine
Failed critical init step 4
setns failed: Permission denied
starting /system/bin/sh
UID: 2000 cap: 0000000000 selinux: enforcing
karnak:/data/local/tmp $

Any help would be much appreciated.
[Fire HD 8 and HD 10 General] diplomatic:
Oof.... the 6.3.1.2 firmware has been patched against mtk-su, I'm sorry to say. I just checked. You have to use the hardware method to downgrade from now on. :(

EDIT: Both HD8-2018 and Fire 7-2019 have been, uh, fixed.
[Fire HD 8 and HD 10 General] Chahk:
Bummer. What are my options now? What's this hardware method that you mention?
[Fire HD 8 and HD 10 General] diplomatic:
[MENTION=1700634]Chahk[/MENTION], see Fire HD 8 (2018 ONLY) unbrick, downgrade, unlock & root
[Fire HD 8 and HD 10 General] nothingnass:
hi, [MENTION=8978978]Rortiz2[/MENTION]

Can Automated Roots V3 root the Amazon kindle fire hd10 2017, the newest version 5.6.4?

I'm a beginner, I just want to root fire hd10 2017. Thanks.
[Fire HD 8 and HD 10 General] Drunkpilot:
Yep. I just got another hd8 8th gen and i can't even push the mtk-su to/data/local/temp. Permission denied. I had just used xyz's method to unbrick my other hd8, so it only took a minute to root this one. Mtk-su was a great find, great enough for Amazon to patch it. Thanks again [MENTION=8132642]diplomatic[/MENTION].
[Fire HD 8 and HD 10 General] MontysEvilTwin:
Have Amazon recently pushed OTA updates? I am on the latest versions that can be downloaded from their website, i.e.

Mustang - update-kindle-NS6312_user_1827_0002517050244.bin - 28 May 2019

Karnak - update-kindle-NS6301_user_1638_0001309042308.bin - 19 July 2019

and mtk-su is still working on these versions using a terminal emulator; I have not tested over ADB. I doubt if Amazon would instigate anti-rollback protection between incremental updates (UNTESTED SUPPOSITION) so presumably any patched update with the same basic version number i.e. 6.3.0.1 (Karnak) or 6.3.1.2 (Mustang) could be rolled back with an ADB sideload of the versions currently available on the Amazon website?
[Fire HD 8 and HD 10 General] diplomatic:
Glad I could help... Have you actually checked if your tablet had updated to FW 6.3.1.2? Pushing the file should not be a problem, as it's a standard OS feature. Maybe if you tried /data/local/tmp .... ;)

I guess they're being rolled out gradually as is every other Amazon update. The kernel sources are already newer. Now would be a good time to disable updates if you want to keep using mtk-su.

I would not bet on the firmware able to be rolled back. This update is important for Amz. But maybe someone would be brave enough to try it...
[Fire HD 8 and HD 10 General] MontysEvilTwin:
Do you know the version numbers of the offending updates? Presumably a bricked device due to anti-rollback could be unbricked with amonet?
[Fire HD 8 and HD 10 General] stegg:
hi, I can root my FireHD 8 2017 but the SuperSU app is not working, ie I have no root access from my apps (I tested with Adaway and Root checker).

I have a working root shell anyway, but everytime I have to open adb and manually enter ./mtk-su

shell@douglas:/data/local/tmp ./mtk-su -v
param1: 0x3000, param2: 0x10000, type: 1
Building symbol table
kallsyms_addresses pa 0x40b07200
kallsyms_num_syms 67972, addr_count 67972
kallsyms_names pa 0x40b8c000, size 817053
kallsyms_markers pa 0x40c53800
kallsyms_token_table pa 0x40c54100
kallsyms_token_index pa 0x40c54500
Patching credentials
init_task VA: 0xffffffc000f16a20
Potential list_head tasks at offset 0x338
0xffffffc0030c8338 0xffffffc036976ab8 0x0000000000008c
comm swapper/0 at offset 0x5b0
Found own task_struct at node 0
real_cred VA: 0xffffffc025e05280
Parsing sel_read_enforce
ffffffc0002d93e8+04: ADRP x0, 0xffffffc001086000
ffffffc0002d93e8+1c: LDR [x0, 4092]
selinux_enforce VA: 0xffffffc001086ffc
Setting selinux_enforce
Selinux is already permissive
New UID/GID: 0/0
starting /tmp-mksh/tmp-mksh
root@douglas:/data/local/tmp #

SuperSu v 2.82 did install its binaries ofcourse... what else am i missing?

---------- Post added at 09:54 PM ---------- Previous post was at 09:45 PM ----------

dang the solution was few pages before...

thanks! this should be sticked in first post :)
[Fire HD 8 and HD 10 General] dr_docdoc:
Not getting Root Access Permanently

EDIT: I figured out my own problem. I had to set SuperSu to GRANT vs. PROMPT. As soon as I did this, the Root Checker worked, and I was able to follow through with removing bloatware using GScript ala this post here: https://xdaforums.com/showpost.php?p=78995563&postcount=45

-----

Hello - with this method, I saw SuperSu successfully installed and binary update request.

However, upon reboot, I run a Root Checker and the check indicates that root access is NOT properly installed on this device.

Please advise! Thank you!
[Fire HD 8 and HD 10 General] cyaclone:
I have not tired any other method to root m HD10 2017. Will this automatice 3 root my device or is there something that I must do before using your automatic?
[Fire HD 8 and HD 10 General] Rortiz2:
It should. But I recommend you to update the mtk-su to latest version. I will update when I can.

Regards.
[Fire HD 8 and HD 10 General] diplomatic:
Good idea. Better yet would be for users to download the mtk-su zip and your tool separately. Also, if you're gonna update it, it would be great if you could make the script revolve around a single call to mtk-su rather than an 'mtk-su -c ...' for each command. That would be much more reliable and faster.
[Fire HD 8 and HD 10 General] Rortiz2:
Mtk-su automated

[MENTION=8132642]diplomatic[/MENTION] here we go.

Thist time, is based on python and it has a lot of new features ;):

Linux Version available

SELinux detector

Device detect

Android Version detect

Arch detect (For use armeabi-v7a mtk-su and arm SuperSU Files or arm64 mtk-su & SuperSU Files)

DM-Verity detector

Root Shell Spawner

Chipset detect (If it's not an mtk arm64 based chip it will advise you)

Quickly process, now it's all in a WORKING .sh file (not in -c commands)

Included a Readme

As always guys I tested the script and worked for me but, it can be bugs so if you find them please, report them.

You will need to install Python3 for use this tool.

And of course:

Set SuperSU to grant in settings!

Download:

LATEST RELEASE HERE: https://github.com/R0rt1z2/AutomatedRoot/releases

Thanks to:

@t0x1cSH for his little help.

[MENTION=8132642]diplomatic[/MENTION] for create MTK-SU.

stackoverflow for his help.

Hope you guys enjoy the tool.
[Fire HD 8 and HD 10 General] cyaclone:
If I use the new MTK-SU_Automated-v4, and since I don't have or now anything about python but put the files in the right location for windows, as stated in your Readme, can I just hook up to the Fire HD 10 and run the bat file to get root or is there more that has to be done?
[Fire HD 8 and HD 10 General] Rortiz2:
Just install this python: https://www.python.org/ftp/python/3.7.4/python-3.7.4-amd64.exe

And then run the .bat file.
[Fire HD 8 and HD 10 General] diplomatic:
OK, cool... I haven't tested it but the code looks good. I linked it on the OP. The only question is why do you need to check for every chipset that it doesn't support? (What about all the Qualcomm ones? :) ) Just checking for mt67xx (starting with "mt67") and the handful of mt81xx ones would be simpler, I think.
[Fire HD 8 and HD 10 General] Rortiz2:
Thanks!:o

Yeah I tought that. It will be easier. I tried it but tool was crashing. BTW I will investigate more and I'll add it in next version.

Regards!
[Fire HD 8 and HD 10 General] Rortiz2:
[MENTION=8132642]diplomatic[/MENTION] I updated the script as you said and it's working OK. Thanks for the suggestion.

https://github.com/R0rt1z2/AutomatedRoot/releases/download/4.1/MTK-SU_Automated-v4.1.zip
[Fire HD 8 and HD 10 General] :
Well this sucks, FireOS 6.3.1.2 patched mtk-su. And I presume there is no way to rollback, short of opening up the device and running amonet?
[Fire HD 8 and HD 10 General] DB126:
Most likely. This thread outlines your options: https://xdaforums.com/hd8-hd10/orig-development/unlock-fire-hd-8-2018-karnak-amonet-3-t3963496
[Fire HD 8 and HD 10 General] :
I guess the silver lining is that FireOS 5 probably won't patch this. And the karnak device is easy to open and short. No need to remove shielding and flip the motherboard like on the suez. Not sure about the FireOS 6 devices and their difficulty of opening and shorting. If you had a FireOS 6 device and didn't disable updates before it, that's your own fault. But if you bought one after the update then that's just bad luck :(
[Fire HD 8 and HD 10 General] DB126:
The 8th gen HD8 (aka karnak) is provisioned with FireOS 6. I agree Amazon probably won't patch most older firmware unless they view it as a security vulnerability. Good luck with your gizmo.
[Fire HD 8 and HD 10 General] chamuc0:
Stuck on fastboot mode HD 8 6th gen

Hello [MENTION=4910071]Oco[/MENTION] ,

I have a Fire HD 8 2016 with firmware version 5.6.0.

I was able to get it rooted following this post and your commands and it was working great, but I messed up with some system apps so I had to sideload the full OS (bin image) from the stock recovery.

But it did not start anymore, it was bricked --Black Screen.

I followed the guide https://xdaforums.com/hd8-hd10/orig-development/fire-hd-8-2018-downgrade-unlock-root-t3894256 and I am able to get it into fastboot mode but I cannot find the right Recovery.img nor Boot.img.

I tried to use payload_dumper to extract the stock images from the official build but the image cannot be extracted. And the images I have found in other posts/guides don't work.

Could you help me to continue from here?
[Fire HD 8 and HD 10 General] Rortiz2:
You flashed Preloader/TZ/LK from fire hd8 2018. You should do as in the past for 7th gen, restore stock images. They're in update.bin.
[Fire HD 8 and HD 10 General] chamuc0:
Correct, I flash those 3 from 2018's version but the issue is that I "cannot/don't know how to" extract the stock images from the BIN file for 2016's version downloaded from amazon. I have been trying several tools on linux and Windows with no luck.

Do you know the best way to do it? Or did you mean something else?
[Fire HD 8 and HD 10 General] Rortiz2:
lol. Rename update.bin to zip and open it.
[Fire HD 8 and HD 10 General] diplomatic:
I don't know about that. Of course this is a security vulnerability. How could it not be? As far as vulnerabilities go, this is about as serious as it gets. I wouldn't be surprised if it gets patched.
[Fire HD 8 and HD 10 General] DB126:
Having messed with Amazon devices for nearly 8 years it's rather interesting to see what gets addressed when. My post noted Amazon's perspective, not necessarily the absolute severity of the vulnerability. Ease of autonomous execution will likely play into any action against devices running FireOS v5 or below.
[Fire HD 8 and HD 10 General] k4y0z:
You can try this:

https://xdaforums.com/showpost.php?p=80217055&postcount=27
[Fire HD 8 and HD 10 General] cyaclone:
MTK-SU_Automated-v4 and Python37

Change of subject, but thought this would be the best way to reach you. Sorry to be a bother, but this is the first time for me to try and root a Fire HD 10. Never had problems with Android phones that had the boot loader open, but this is a new ballgame.

Okay, I found the Python37 location and transferred all of the files from the MTK-SU_Automated-v4. The next step is to just run the bat file from that location. Correct?
[Fire HD 8 and HD 10 General] chamuc0:
Thank you for that bro, after long time searching, the solution was so simple.

I tried to install boot.img as bootloader or recovery but this is the current state of the tablet.

"FAILED (remote: the command you input is restricted on locked hw)"

Which image should I use to flash the boot or recovery partition? Because that one is the stock one and I tried to use it for both.

**Also "fastboot boot boot.img" did not work
[Fire HD 8 and HD 10 General] Rortiz2:
Yes. If still with problems, open a cmd in Python37 location and type:

python3.exe mtk-su.py

If you get an error as python3 is not reconigzed.. bla bla, run this:

python.exe mtk-su.py

Regards.

PS: Thanks for the little reward:o
[Fire HD 8 and HD 10 General] chamuc0:
[UNBRICK]Fire HD8 2016 (giza)

After looking for long time and a lot of posts with no solution, finally, with the great help of
[Fire HD 8 and HD 10 General] cyaclone:
Update. Opened CMD in python37 and ran both scripts and got no response to either. Does this mean that all is okay to run the bat file or should I have gotton some type of a response on the cmd?
[Fire HD 8 and HD 10 General] Rortiz2:
Well the tool should started. Try the bat, yes.
[Fire HD 8 and HD 10 General] cyaclone:
One last question. If it does not work, will I just have the normal Fire AHD 10 or will I what?

Just looking at the worst case and what to do to get back to square one.
[Fire HD 8 and HD 10 General] cyaclone:
Correct, the boot did work and I have SU but don't have root.

Loaded my other programs that I use with root, but how do i get root?

If, i lwhen I do get root, is there a version of TWRP that I can use?

What;s my next step?
[Fire HD 8 and HD 10 General] Rortiz2:
Ok so, you have to go to SuperSU Settings and set the Root prompt to grant.

For TWRP see this: https://xdaforums.com/hd8-hd10/orig-development/unlock-fire-hd-10-2017-suez-t3913639/post80239754

Also, thanks for the other reward! Give some to diplomatic he is the creator of mtk-su lol.

BTW: Thanks!;)
[Fire HD 8 and HD 10 General] cyaclone:
I forgot to mention that I have SUPro but it doesn't open just a box with the following 1st line SuperSU 2nd line : root undetected 3rd line (grey letters) How To Root

What next?

---------- Post added at 12:54 PM ---------- Previous post was at 12:39 PM ----------

or did something go wrong with the bat download and if so, can I just do the bat download again to get the correct SU file?
[Fire HD 8 and HD 10 General] Rortiz2:
For not spam the thread, PM me.

Regards!
[Fire HD 8 and HD 10 General] KonigTX:
Can't get this to work... Fire 7th gen on 5.6.4.0

error is:

armv71 machine
No access
Failed critical init step 1
setns failed: Permission denied
starting /system/bin/sh
UID: 2000 cap: 0000000000 selinux: enforcing
[Fire HD 8 and HD 10 General] diplomatic:
[MENTION=5445803]KonigTX[/MENTION], nowhere does it say this is compatible with Fire 7- 7th gen....
[Fire HD 8 and HD 10 General] stevcan:
Can you help? this isn't working on my hd 8 2018. It just says

Failed critical init step 4
UID: 2000 cap: 0000000000 selinux: enforcing

The verbose is

armv8l machine
Failed critical init step 4
setns failed: Permission denied
starting /system/bin/sh
UID: 2000 cap: 0000000000 selinux: enforcing
[Fire HD 8 and HD 10 General] ksh0127:
Yeah I'm getting the exact same error for my Fire HD 10 7th gen.
[Fire HD 8 and HD 10 General] diplomatic:
Guys, the 'Failed critical init step 4' means the end of mtk-su for your tablet. You were kind of late to the party. Look for the unlock threads for the HD 8 and HD 10. I believe there's a way to unlock the bootloader with software, but no temp root.

EDIT: The clock is ticking for the HD 8 2016 & 2017. Now is the time to get permanent root or block OTA updates if you want to keep using mtk-su.
[Fire HD 8 and HD 10 General] Kctucka:
Someone should check if the old kingoroot method for the HD10 still works:

https://xdaforums.com/hd8-hd10/general/hd-10-2017-offline-rooting-t3734860

May be the best way to root and unlock on the HD 10 until [MENTION=7104332]k4y0z[/MENTION] figures out the software unlock, though he is pretty quick :laugh: