[Galaxy Tab General] brionoid:
Rooting Guide - Tab P1000

Rooting Galaxy Tab P1000

===================

I had success rooting my Galaxy Tab P1000 (running Froyo & Gingerbread) with SuperOneClick 2.3.3 so that I could Carrier Unlock the Vodafone for use with Canadian carriers (Bell/Virgin). refer my post dated Oct24 2011 http://xdaforums.com/showthread.php?t=843323&page=46

This is the 3RD time it had reverted back to Vodafone; not 100% sure, but it seems to occur after getting a notification for a Samsung Push update.

Presently the phone is as follows:

Model: GT-P1000 from Vodafone Australia

Firmware: 2.3.6

Baseband ver.: P1000XXJR2

Kernel ver.: 2.6.35.7 dpi@DELL152 #2

Build ver.: GINGERBREADXWJU4

Have tried SuperOneClick 2.3.3. and DooMLoRD Easy rooting toolkit (v4.0) without success.

Would appreciate tips on tools/procedure to successfully root device :)

Thanks...

1. SuperOneClick 2.3.3 "fails", or "hangs", at Step 5 and Step 7

Logs from Failure at Step 7 follow:

= start of log =======================

* daemon not running. starting it now on port 5037 *

* daemon started successfully *

export PS1=""

$ export PS1=""

getprop ro.build.version.release > /data/local/tmp/output 2>&1

export TEMPRANDOM=30213

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

2.3.6

END:30213export PS1=""

getprop ro.product.manufacturer > /data/local/tmp/output 2>&1

export TEMPRANDOM=12349

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

samsung

END:12349export PS1=""

getprop ro.product.model > /data/local/tmp/output 2>&1

export TEMPRANDOM=89492

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

export TEMPRANDOM=89492

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

GT-P1000

END:89492export PS1=""

getprop ro.build.version.incremental > /data/local/tmp/output 2>&1

export TEMPRANDOM=76636

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

XWJU4

END:76636export PS1=""

ls -l /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=49054

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/xbin/su: No such file or directory

END:49054export PS1=""

ls -l /system/bin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=87919

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/bin/su: No such file or directory

END:87919export PS1=""

chmod 755 /data/local/tmp/busybox > /data/local/tmp/output 2>&1

export TEMPRANDOM=36496

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:36496export PS1=""

/data/local/tmp/busybox whoami > /data/local/tmp/output 2>&1

export TEMPRANDOM=75361

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

export TEMPRANDOM=75361

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

whoami: unknown uid 2000

END:75361export PS1=""

rm /data/local/tmp/boomsh > /data/local/tmp/output 2>&1

export TEMPRANDOM=80071

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

export TEMPRANDOM=80071

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:80071export PS1=""

rm /data/local/tmp/sh > /data/local/tmp/output 2>&1

export TEMPRANDOM=67215

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:67215export PS1=""

chmod 700 /data/local/tmp/zergRush > /data/local/tmp/output 2>&1

export TEMPRANDOM=34626

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:34626export PS1=""

cd /data/local/tmp/ > /data/local/tmp/output 2>&1

export TEMPRANDOM=21770

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:21770export PS1=""

export TEMPRANDOM=75361;export PS1=END:$TEMPRANDOM;./zergRush

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00000118

[+] Found a Samsung, running Samsung mode

[*] Scooting ...

[*] Sleeping a bit (~40s)...

[*] Waking !

[*] Sending 149 zerglings ...

[*] Sleeping a bit (~40s)...

[*] Waking !

[*] Sending 189 zerglings ...

[-] Hellions with BLUE flames !

END:75361export PS1=""

export PS1=""

/data/local/tmp/busybox mount -o rw,remount /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=75063

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:75063export PS1=""

/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=62208

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /app-cache type tmpfs (rw,relatime,size=12288k)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p3 on /preload type vfat (ro,nodev,noatime,nodiratime,fmask=0133,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

/dev/block/mmcblk0p2 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl3 on /efs type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/vold/179:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

END:62208export PS1=""

/data/local/tmp/busybox mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=34626

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:34626export PS1=""

/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=21770

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

export TEMPRANDOM=21770

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

/dev/block/stl6 on /mnt/.lfs type j4fs (rw,relatime)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /app-cache type tmpfs (rw,relatime,size=12288k)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/stl9 on /system type rfs (ro,relatime,vfat,log_off,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/mmcblk0p3 on /preload type vfat (ro,nodev,noatime,nodiratime,fmask=0133,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

/dev/block/mmcblk0p2 on /data type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl10 on /dbdata type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl11 on /cache type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/stl3 on /efs type rfs (rw,nosuid,nodev,relatime,vfat,llw,check=no,gid/uid/rwx,iocharset=utf8)

/dev/block/vold/179:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0002,dmask=0002,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

END:21770export PS1=""

mount -o rw,remount /dev/block/stl9 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=92927

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: Operation not permitted

END:92927

= end of log ================

2. Lastly, I tried DooMLoRD Easy rooting toolkit (v4.0)

the program fails, with the following log entries

= start of log =====================

---------------------------------------------------------------

Easy rooting toolkit (v4.0)

created by DooMLoRD

using exploit zergRush (Revolutionary Team)

Credits go to all those involved in making this possible!

---------------------------------------------------------------

[*] This script will:

(1) root ur device using latest zergRush exploit (21 Nov)

(2) install Busybox (1.18.4)

(3) install SU files (binary: 3.0.3 and apk: 3.0.6)

(4) some checks for free space, tmp directory

(will remove Google Maps if required)

[*] Before u begin:

(1) make sure u have installed adb drivers for ur device

(2) enable "USB DEBUGGING"

from (Menu\Settings\Applications\Development)

(3) enable "UNKNOWN SOURCES"

from (Menu\Settings\Applications)

(4) [OPTIONAL] increase screen timeout to 10 minutes

(5) connect USB cable to PHONE and then connect to PC

(6) skip "PC Companion Software" prompt on device

---------------------------------------------------------------

CONFIRM ALL THE ABOVE THEN

Press any key to continue . . .

--- STARTING ----

--- WAITING FOR DEVICE

--- creating temporary directory

mkdir failed for tmp, File exists

--- cleaning

rm failed for *, No such file or directory

--- pushing zergRush

62 KB/s (23060 bytes in 0.359s)

--- correcting permissions

--- executing zergRush

[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.

[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.

[+] Found a GingerBread ! 0x00000118

[+] Found a Samsung, running Samsung mode

[*] Scooting ...

[*] Sleeping a bit (~40s)...

[*] Waking !

[*] Sending 149 zerglings ...

[*] Sleeping a bit (~40s)...

[*] Waking !

[*] Sending 189 zerglings ...

[-] Hellions with BLUE flames !

--- WAITING FOR DEVICE TO RECONNECT

if it gets stuck over here for a long time then try:

disconnect usb cable and reconnect it

toggle "USB DEBUGGING" (first disable it then enable it)

--- DEVICE FOUND

--- pushing busybox

1399 KB/s (1075144 bytes in 0.750s)

--- correcting permissions

--- remounting /system

mount: permission denied (are you root?)

--- checking free space on /system

13 KB/s (439 bytes in 0.031s)

df: /mnt/.lfs: Function not implemented

--- Free space on /system : 6852 bytes

--- no cleanup required

--- copying busybox to /system/xbin/

/system/xbin/busybox: cannot open for write: Read-only file system

--- correcting ownership

Unable to chmod /system/xbin/busybox: No such file or directory

--- correcting permissions

Unable to chmod /system/xbin/busybox: No such file or directory

--- installing busybox

/system/xbin/busybox: not found

--- pushing SU binary

failed to copy 'files\su' to '/system/bin/su': Read-only file system

--- correcting ownership

Unable to chmod /system/bin/su: No such file or directory

--- correcting permissions

Unable to chmod /system/bin/su: No such file or directory

--- correcting symlinks

rm failed for /system/xbin/su, Read-only file system

link failed Read-only file system

--- pushing Superuser app

failed to copy 'files\Superuser.apk' to '/system/app/./Superuser.apk': Read-only

file system

--- cleaning

--- rebooting

ALL DONE!!!

Press any key to continue . . .

= end of log ======================

= End of Post ====================