yashsingh1/xdaforums huggingface dataset:
[Click Android Development] Coburn64:
yes!!! :D

Bring on the CoburnROM!

Tested more than 3 times now, and succesfully rooted each time after a few dumps of code. :D
[Click Android Development] cn.fyodor:
Welcome, CoburnROM! :D
[Click Android Development] manuvaidya:
can we have a step by step guide to root tattoo???

because we dont really understand wht is pushing files to tattoo & how do we run script on our pc/android phone ????

i am like most others very curious to know how to do it. i agree that i am a noob here.... please explain a bit in detail guys..... i wanna learn things....

sorry for my noob question.....
[Click Android Development] relol:
You have it on the first post. Have you looked at it?

:D
[Click Android Development] zipredictive:
:D

HTC Tattoo

Firmware ovviamente 1.6

Kernel 2.6.29-gf922713

htc-kernel@and18-2 #117

Build 1.67.405.6
[Click Android Development] gascharlie65:
I have also rooted my tattoo as indicated; the problem is now (for not an expert like me) how to use the root access to install and run programs that need root (like openvpn, wifi helper, tethering WiFi, and so on). Do we need to wait for a new ROM (if I well understand) or it is enough to change with chown command the attributes of files and directory after a normal install? Thanks!
[Click Android Development] LeeGath:
Well and truly rooted

Guys,

Great work. I now have a rooted HTC Tattoo, thanks to the M7 fix.....awesome work.

Now what :) ?

The original problem I was trying to fix was that I had a locked Tattoo to Orange. I did a ROM flash which got rid of all the Orange guff, but it still gives me the message that I need a network unlock code to work. In reality, that seems a spurious message because even with a valid(?) or just an 8 digit number it looks unlocked, but the sim doesn't work.

Reading around the topic, I gather that the radio doesn't get flashed because Orange prevents access to it. What I'm thinking is that now that I have a rooted adb shell I can apply a ROM to the Radio?

Any ideas. Although I'm tech-savvy, the phone is a new platform. So please be gentle.

Thanks
[Click Android Development] 3DPRO:
my kernel is

Kernel 2.6.29-gf922713

htc-kernel@and18-2 #117

and i'm rooted. :D
[Click Android Development] maninhas:
can you tell me please with this can we already install appllication on sd card? And install appllication that needs root access? Thanks
[Click Android Development] manuvaidya:
after seeing that i am asking this question.... i dont really know how to proceed step by step. would any one care anough to explain it to me ho wi do it on windows 7 ultimate ???

for the devs who have made it to root tattoo, congrats guys for ur wonderful work....

when can we expect the custom roms??? i am dying to install one on my tattoo.... i am even ready to try ur testing ROMs..... please post here ur cooked ROMs.....
[Click Android Development] Coburn64:
I will post a newbie guide for the exploit. Please stand by.
[Click Android Development] manuvaidya:
agreed.. i will wait for ur guide..... coburn, when can we expect a custom rom for tattoo ???? i am bored of seeing the same UI daily.... please for god sake bring out one custom ROM.... :p
[Click Android Development] zipredictive:
ok everything is ok sorry
[Click Android Development] Coburn64:
No, that is normal, if you press enter after the usage: reboot blah blah things, you still get the hash prompt. It's a side effect. :)
[Click Android Development] Coburn64:
CoburnROM 360 is on it's way... More details later, let's keep on topic about rooting the device.
[Click Android Development] zipredictive:
ok thank u so much... ;)

and thanks for working on the batch !
[Click Android Development] Coburn64:
No problem. I'm a hacker by nature. :p

Newbie guide is up, see my rooting thread for more info!
[Click Android Development] sheik_yerbouti:
Needless to say, the exploit worked first time.
[Click Android Development] Coburn64:
Glad to hear it. Could m7 be the new SU? ;)
[Click Android Development] sheik_yerbouti:
I sure hope it is...
[Click Android Development] -bm-:
Our actual solution to get root on the device does NOT enable us to use the usual applications that need root like WIfi Tethering etc.

For the "normal" user, the actual situation it useless. But for developers, its not...

-bm-
[Click Android Development] suoko:
thanks for clarify

i'll wait the root update.zip then
[Click Android Development] marsdroid:
OFFTOPIC.............
[Click Android Development] nerchia:
GREAT!!

m7 rooted my device at first try. :eek:
[Click Android Development] nonoheran:
MAJ

Hi all

can you tel men if when htc upgrade click to 2.0 or 2.1 android the root work ?

or have we got to root it again ?

thank's

SORRY for my english
[Click Android Development] sheik_yerbouti:
It's been mentioned a LOT fo times that once teh Tattoo gets a 2.0 or 2.1 update, this exploit WILL NOT WORK!
[Click Android Development] dusan7:
Thank you guys for all the work done for success.

One question: Can we add now our own alarmtones to the system menu of the phone?
[Click Android Development] HTCDevil:
Obviously :D
[Click Android Development] iliko:
Got m7 worked first time, but not working again so i can push su into it.

Any ideas?:mad:

Now it always stubles on the same line 17:

Wrote shellcode e50d3004 line 9

Wrote shellcode e24d1008 line 10

Wrote shellcode e24d2004 line 11

Wrote shellcode e3a0700b line 12

Wrote shellcode ef000000 line 13

Wrote shellcode 7379732f line 14

Wrote shellcode 2f6d6574 line 15

Wrote shellcode 2f6e6962 line 16

Wrote shellcode 6873 line 17

Wrote shellcode 0 line 18

[ Overwritten 0xb0000100

Got it again!

So root stays during a single session as soon as you come out of console it is gone. Hope you guys can make it stay permanently.
[Click Android Development] suoko:
i've seen openeclair on the magic

which has the same tattoo hw.

i'd like to skip official htc updates

is there an irc channel to try collaborate and get openeclair work on tattoo asap ?

watch?v=9dL3IEHiOQA&feature=player_embedded
[Click Android Development] 5[Strogino]:
Dudes, what about pushing su into /system/xbin/ instead using /data/local ???

Or push to /system/xbin after pushing /data/local

What about using superuser.apk?
[Click Android Development] Coburn64:
We cannot write to /system just yet. We get all sorts of weird stuff if we try.

Also, the Tattoo != Magic. So, please, If you're looking to run OpenEcliar on this device, wait until we can flash custom ROMs. Thanks.
[Click Android Development] gascharlie65:
I do not know if it is a coincidence but when I used yesterday m7 (after having root successfully also with m6) it worked fine and immediately I got the root prompt; after that my battery consumption rate increased a lot and in half a day my battery was down (I never had this behaviour before). I rebooted the phone and now it seems to be normal (as for battery charge) again. Can it be that some process runs continuously in background or do you think it is a coincidence (maybe some other process - yesterday I used also SipAgent for the first time)? Probably since it seems I am the only one with this problem (also on other forum I did not see anything wrong with m7) it was something with my application on the phone (even if apparently I did not have any user-application running)...
[Click Android Development] Coburn64:
Yeah, the exploit will only stay active until the root shell has been spawned.

The SIPAgent app possibly was using your data connection, hence the battery drain.

The m7 exploit just spikes the CPU usage to get root, then the CPU goes in sleep mode to conserve energy (underclocking itself). Sometimes google sync saps the battery, it's annoying though.

Tip: Top up the battery when getting low, this helps the battery's life as well, as you're not fully charging it, you're just giving it a bit of juice and then taking it off (spiking the voltage). This is harmless and some batteries can sometimes get you some extra voltage (eg. Battery was on 15%, I 'spiked' it, and it reported 25% after a minute or two).
[Click Android Development] gascharlie65:
Many thanks Coburn64. Actually the SIP agent was apparently closed and I had neither wifi neither radio connection on (almost all the day).

Actually I stopped the root shell by deconnecting the USB cable (the ctlr^C was not working and also quit and exit command). But anyway I think that probably it was something else (I wrote just to advise you in the case you could identify some bug).
[Click Android Development] avimak:
Thanks for r00t2 :) works perfectly!

Just a quick question, why can't I mount my system/fonts folder?

I want to push new fonts. thanks
[Click Android Development] coolbits:
You can mount /system... r/w but you get 0 free space...

This is the main problem now after root...
[Click Android Development] Coburn64:
We're having a problem with the /system partition. We're working on it, once we have the sucker fixed, we'll release the tool to remount the /system partition read write, then you can mod that Tattoo with some nice fonts ;)
[Click Android Development] avimak:
In my friend's case it's an elementary thing like being able to read/write Hebrew... :) thanks a lot!
[Click Android Development] atommat:
success

ive had perfect results with m6 and m7. *tips wing*

i wont drift from topic but im keen to know more and explore the potential of the rooted tattoo. any good sources, threads or projects?

atom
[Click Android Development] Coburn64:
Just explore and get to know the inner workings of the file system. See if you can scratch up anything that may lead us to anything (eg suspicious files, etc etc).

I'm exploring mine, I know where the theme files are stored now. :)

EDIT: Whoa! Almost ~225 Posts in this thread! It's a record!
[Click Android Development] bool_s:
Unprotect system partition - done!!!

Be extremely careful - only for the most advanced folks in this forum!

1. Get root with my awesome "m7" hack

2. Copy tattoo-hack.ko to /data/local/bin

3. # insmod /data/local/bin/tattoo-hack.ko

4. Remount system partition to be writeable

Now you done! Go ahead - delete and replace your system files...

This hack especially useful for Israeli folks: replace system fonts if your want to read/write Hebrew with your Tatt00.

Again, please be gentle and try not to destory your precious phone permanently!
[Click Android Development] HTCDevil:
Thanks bool_s for your really nice job ;)
[Click Android Development] coolbits:
Cool :)

I copied "su" to /system/bin rebooted and now i dont have to run the exploit everytime, just su works.

What to do now for apps to be able to use it?

+ after reboot /system is ro again

from terminal emulator on the phone i get:

su: uid 10055 not allowed to su
[Click Android Development] HTCDevil:
Have you tried to install any root apk (cachemate, ecc.)?
[Click Android Development] mainfram3:
And it even has sauce!

You Sir, are a gentleman.
[Click Android Development] coolbits:
I tried setCPU... it dont work...

There is some other permission problems, as every ap gets its own id
[Click Android Development] HTCDevil:
Thank you very much for your answer :)
[Click Android Development] coolbits:
Ok i found SU that will make apps use it... setcpu NOW WORKS :D

I found it here hxxp://android-dls.com/wiki/index.php?title=Magic_Root_Access

copy to /system/bin and reboot...
[Click Android Development] HTCDevil:
Thank you very much coolbits :) Great :)
[Click Android Development] life02:
How do I copy to /system/bin?

I'm getting a cross-device link error.
[Click Android Development] coolbits:
Reboot and do it all over... copy/paste line by line

adb push su /sdcard/ (for example, somewhere else from previous su)

adb shell

while do /data/local/bin/m7 ; done

/data/local/bin/su

export LD_LIBRARY_PATH=/system/lib

export PATH=/system/bin

insmod /data/local/bin/tattoo-hack.ko

mount -o rw,remount /dev/block/mtdblock5 /data

mount -o rw,remount /dev/block/mtdblock3 /system

cp -f /sdcard/su /system/bin/ (i did it with busybox)

reboot

worked for me... :)

rootexplorer also works...
[Click Android Development] life02:
Well I haven't installed busybox yet so I used:

cat /sdcard/su > /system/bin/su

Looks like the su is under /system/bin but root isn't working for me in setcpu.... any ideas?
[Click Android Development] life02:
I did a 'chmod 6755 su' and now it works!!! :D
[Click Android Development] sheik_yerbouti:
So let me get this straight: Once I do this, I'll have root even after restarting AND get apps to run as root too?
[Click Android Development] life02:
Correct...

adb push su /sdcard/

adb shell

while do /data/local/bin/m7 ; done

/data/local/bin/su

export LD_LIBRARY_PATH=/system/lib

export PATH=/system/bin

insmod /data/local/bin/tattoo-hack.ko

mount -o rw,remount /dev/block/mtdblock5 /data

mount -o rw,remount /dev/block/mtdblock3 /system

cd /system/bin/

mv su su.old

cp -f /sdcard/su /system/bin/ (i did it with busybox)

-OR-

cat /sdcard/su > /system/bin/su (for those of us without busybox)

cd /system/bin/

chmod 6755 su

reboot

I have root in adb shell by typing su (without running m7) and my root applications are working. I cannot use su via terminal emulator in android though.
[Click Android Development] sheik_yerbouti:
Amagad! This is awesome! I'm gonn give this a whirl after going home.
[Click Android Development] suoko:
next step...

...should be move app directory to sd card to increase space dedicated to apps by creating the ext2/3(4?) partition in the sd card

correct ?

what about the swap partition ? does anyone know whether it boosts the device significantly ?
[Click Android Development] ivendor:
i've rooted my tattoo, i've copied su to /system/bin, and i can run su from any application, i've tried with connectbot. But bluex app give me an error. Why?

Are there some issues with bluetooth in tattoo kernel?
[Click Android Development] coolbho3000:
SetCPU frequencies probably won't stick because of perflock driver in the kernel. But at least it detects root and all.
[Click Android Development] suoko:
i've also got problems with wireless-tether (1.6, 1.7 and 2.0) but at least setcpu seems working.

I'm gonna try the sd extension trick now
[Click Android Development] jointfull:
Exec format error

When I run the insmod command, this is what I get:

# insmod /data/local/bin/tattoo-hack.ko
insmod /data/local/bin/tattoo-hack.ko
insmod: init_module '/data/local/bin/tattoo-hack.ko' failed (Exec format error)

On some forum, it says that:

I'm using Tattoo A3288, kernel version 2.6.29-g5d289ea, build 1.66.728.1.
[Click Android Development] svprm:
Coolbits and bool_s.

Thanks man.

Working.....
[Click Android Development] mmike21:
when we type cat , we are copying su to the su on the /system/bin

or we are extending "cat" the original plus this one?

When i do cat .. the console shows the file contects with all those weird encrypted digits, and then returns invalid lenght and crashes the console..

Anyidea?

Routing is simple, when the reboot error ocurrs i just press ";" and i got the root..
[Click Android Development] simpson_lhs:
Tattoo rotted!!!

Dear all... thank...

I rooted my tattoo.

But I unable to execute "reboot" command while in /system/bin/

Anyway... I manually reboot my tattoo.

After reboot, I able to view /system & /data directory using rootExplorer !!!

Good.

My tattoo software version (Singapore):

1.67.707.8

Kernel:

2.6.29-gf922713

htc-kernel@and18-2 #117

Build number

1.67.707.8 CL#74492 release-keys
[Click Android Development] coolbits:
Do not forget the >

cat /sdcard/su > /system/bin/su
[Click Android Development] life02:
cat concatenates files but if you did the mv su su1 then the original su will now be su1 and cat will basically copy /sdcard/su to /system/bin/su

The > is very important....if it's absent, it will cause the shell to crash:

cat /sdcard/su > /system/bin/su
[Click Android Development] bool_s:
Module works for kernel 2.6.29-gf922713 only.
[Click Android Development] coolbits:
try chmod 4755 su

my terminal emulator works

bool_s:

If we install tattoo-hack.ko module to /system/lib/modules/

will it work after reboot too?
[Click Android Development] jointfull:
Tattoo kernel update

How do I upgrade my kernel to this version?

Can I flash something? where can I download it from?

(Thanks in advance)
[Click Android Development] coolbits:
Try this one...

xdaforums.com/showpost.php?p=5677311&postcount=39
[Click Android Development] shears:
if i try this it says:
[Click Android Development] mmike21:
i also get

uid=2000(root) gid=2000(shell) groups=1003(graphics),1004(input),1007(log),1011(a db),1015(sdcard_rw),3001(net_bt_admin),3002(net_bt ),3003(inet)

equal to gid=2000.

but thats new because, it was 0001 once.. ( perhaps i did something wrong)

Also.. i place the su and m6/m7 exploits on the /data/local and not to bin...

but somehow.. the /system/bin/su is 0bytes ?? i think i there was a crash when doing the cat su from one site to another..

i can get root.. but ..

All i need and the purpose of this forum for me was more, to find a way to change the etc/wifi/wpa config file.. to have credentials for wifi... :(
[Click Android Development] coolbits:
Works after reboot too

You need to take all steps from install su to chmod 4755

/system must be writable
[Click Android Development] coolbits:
Make sure you take all steps in correct order as wrtitten and all commands work...
[Click Android Development] dancer_69:
Some help please here:confused:

When I enter insmod /data/local/bin/tattoo-hack.ko command

I get an error:

insmod: can't open 'data/local/bin/tattoo-hack.ko'

I suppose that tattoo-hack.ko isn't there. But how can I copy it to that place? I already download it and put it in folder with all tatto rooting stuff(on pc).
[Click Android Development] coolbits:
You should read a few posts back, where hack is posted and install it first...
[Click Android Development] dancer_69:
I think that you mean this post.

But how can I copy tattoo-hack.ko to /data/local/bin(2)??
[Click Android Development] mmike21:
Why i get cross link errors.. when moving files from one place to another.. like the /sdcard to /data/local
[Click Android Development] coolbits:
adb push tattoo-hack.ko /data/local/bin/

Read from the beginning on how to do adb...
[Click Android Development] dancer_69:
Thanks for your help.

Now it works!!!

I can be root after reboot, and also from device's terminal.

Thanks again.
[Click Android Development] -bm-:
HowTo in first post was updated, it also explains how to make su permanent etc.

-bm-
[Click Android Development] HTCDevil:
After that:

adb push su /sdcard/

adb shell

while do /data/local/bin/m7 ; done

/data/local/bin/su

export LD_LIBRARY_PATH=/system/lib

export PATH=/system/bin

on other shell: adb push tattoo-hack.ko /data/local/bin/tattoo-hack.ko

insmod /data/local/bin/tattoo-hack.ko

mount -o rw,remount /dev/block/mtdblock5 /data

mount -o rw,remount /dev/block/mtdblock3 /system

cd /system/bin/

mv su su.old

cat /sdcard/su > /system/bin/su (for those of us without busybox)

cd /system/bin/

chmod 6755 su

reboot

I've installed iskoot (modified-it requires root), root explorer (mount r/w), cachemate. :D
[Click Android Development] 5[Strogino]:
coolbits, did you try install Superuser.apk? It is whitelist for app, which required root-permissions
[Click Android Development] coolbits:
No i did not... as i read it installs its own su and i dont know if it will work... will try later.
[Click Android Development] kiljacken:
/\ -- That is what i did -- /\

I can't use the su for apps, but it works from adb...

Can somebody help??
[Click Android Development] coolbits:
su should be chmod 4755
[Click Android Development] kiljacken:
Thanks, but that didn't work...
[Click Android Development] coolbits:
Then you probably installed wrong SU... check again.
[Click Android Development] kiljacken:
Thanks, that worked like it should...
[Click Android Development] HTCDevil:
I haven't had any kind of problem with 6755 for now, installed some apps that requires root.

Once i have permanent root, are m7 and su (old) in /data/local/bin nedeed yet?
[Click Android Development] marsdroid:
that was my problem.... i have 14 mb, something left in system
[Click Android Development] coolbits:
No m7 was needed to get su in there... new su works so no need for both...

Check first post.
[Click Android Development] HTCDevil:
...ok thanks...and what about tattoo-hack.ko and su in /data/local/bin

Thanks again friend :)

edit: about "su" you've just answered, sorry :), and what about tattoo-hack.ko?
[Click Android Development] coolbits:
I wonder if we install tattoo-hack.ko to /system/lib/modules/ it maybe runs on boot...

otherwise you need it there to gain real r/w access to /system

Better have it there for now :)
[Click Android Development] HTCDevil:
Got it, thanks :)
[Click Android Development] -bm-:
Now with /system writeable I was able to install javabox on my tatto ( http://home.leakdroid.com/2009/08/java-app-for-android/ )

Now I have Opera mini 5 beta running on tattoo - wohooo!! :-)

(I like it more than any other browser jet available on android but that is a matter of taste)

-bm-
[Click Android Development] 3DPRO:
got another problem here.

My device is rooted but when i tried to upload my fonts to /system/fonts it's say that the device is out of space. I've tried with adb and Rootexplorer but no success. i checked the space of /system there're 8 Mb in it but when i tried to copy my file and paste. the space will went to 0KB. :(

PS. Sorry for my bad english.
[Click Android Development] coolbits:
Reboot and do

2. # insmod /data/local/bin/tattoo-hack.ko

3. Remount system partition to be writeable

now its writable, but on another reboot you have to this again...
[Click Android Development] 3DPRO:
thank you so much!!! now my Tattoo got a new font. :D
[Click Android Development] zipredictive:
can we see? :p
[Click Android Development] zrubi:
I keep getting this error when running insmod /data/local/bin/tattoo-hack.ko

insmod: init_module '/data/local/bin/tattoo-hack.ko' failed (Exec format error)

what am I doing wrong?

Edit:

sorry, I didn't search before, but what I suppose to do if I don't have the kernel version that can run the module
[Click Android Development] 3DPRO:
i'm still trying to find a good Thai font that compatible with QVGA phone. found nothing but i push the Sagoe UI font in and it's really nice. ;) It's compatible. :)

anyway, do any of you guys working on a splash screen?? wanna change it so much. :p
[Click Android Development] coolbits:
Try to flash another rom version... i posted a link a few pages back to someone with the same problem.
[Click Android Development] zrubi:
ok thank!!!
[Click Android Development] suoko:
another possibile hack

here they explain how to hack the tattoo in order for it to be recognized as a different phone to access the market apps which have been "officially" designed for larger screens

http://www.androidiani.com/forum/htc-tattoo-modding/10078-think-thank-fix-market-root.html
[Click Android Development] mrigesh:
init.rc file

here is the init.rc file of tattoo .... does anyone have any idea how this file can be modified to grant a persistent root access to all applications
[Click Android Development] Coburn64:
In that init.rc, I think we'd need to edit the following:

Knock out...

mount rootfs rootfs / ro remount

...and replace it with

mount rootfs rootfs / rw remount

Knock out...

mount yaffs2 mtd@system /system ro remount

...and replace it with

mount yaffs2 mtd@system /system rw remount

Change

mount yaffs2 mtd@userdata /data nosuid nodev

...to...

mount yaffs2 mtd@userdata /data nodev (nosuid was removed from this line)

This is a start. Also, it seems the Tattoo has Green, Amber, Red and Blue LED support? I can't seem to get the Blue LED to light up, is it a hidden item? (I get Red for low battery, Amber when on the charger, Green for full battery (on AC Power)/SMS/MMS/Email/IM, but no Blue LED. Odd.

EDIT:

What's this?!

Eh? Eh? Ehhhh? :p
[Click Android Development] jamezelle:
hey can you post that script?