Has anyone rooted or ROM'd the MID7120-4G yet??

[barcodelinux]

I just bought this tablet on ebay for $100 and figured I'd give it a shot. I am not sure if this thing is a Gen 1 or a Gen 2 device because it has an ARM6 clocked to 800Mhz but it does ship with Gingerbread. Coby doesn't even have it listed on their site. My end goal is to be able to get CM7 or some other AOSP based ROM on this thing and overclock it to 1Ghz to speed it up.

I tried using the z4root v1.3.0 method without success. It gets to the "Acquiring root shell" screen and crashes.

I tried to manually root it using adb in Linux but could not find a writeable partition to copy psneuter and busybox binaries to. I tried to push them to the /sdcard and /storage partitions and then execute then from there but then could not chmod them afterwards. Weird, right?

I don't have a Windows machine other than and XP install in VirtualBox but the problem is that the USB passthrough doesn't see the tablet so the SuperOneClick method won't work there either. Can someone with a 7120 and a Windows machine verify that this method even works on this tablet?

I did get the market installed but that's about it. Anyone have any ideas?

 

[lfom]

Latest SuperOneClick should work, look for tutorials for 7022, 7012 or even 7127. They should work for 7120 as well.

 

[barcodelinux]

I was afraid that you might say that. Now I have to buy another HDD to install XP on just to do this.

Even if I get it rooted and clockwork recovery installed, are there any ROM's that would boot on this thing?

 

[lfom]

I don't think you have to have XP, I think it works with Win7 as long as it's 32-bits. Might even work in 64-bits if you install the correct drivers.

AFAIK no custom ROMs for either 7012 or 7120.

 

[barcodelinux]

Well, I installed a 32bit XP. Got ADB installed. ADB can see the device and gives a serial number. Fired up SuperOneClick 2.3.1 and clicked on Root. After several restarts of adb, SOC froze. I restarted adb and SOC. This time I clicked on Shell Root and it got all the way to "Pushing File ........0.27s" and it locked up again.

Looking at the logs, it seems as though it ran into the same problem I did earlier. It couldn't find a writeable directory for the exploit and it just restarted the adb server and froze.

I don't understand why this thing is so hard to root given that it is a generic device. Are there any other methods for rooting?

 

[crazythunder]

Well, I installed a 32bit XP. Got ADB installed. ADB can see the device and gives a serial number. Fired up SuperOneClick 2.3.1 and clicked on Root. After several restarts of adb, SOC froze. I restarted adb and SOC. This time I clicked on Shell Root and it got all the way to "Pushing File ........0.27s" and it locked up again.

Looking at the logs, it seems as though it ran into the same problem I did earlier. It couldn't find a writeable directory for the exploit and it just restarted the adb server and froze.

I don't understand why this thing is so hard to root given that it is a generic device. Are there any other methods for rooting?

do you have anything else running that might be using adb? like droid explorer? try going into task manager and kill the adb service. then try it again. if that fails, kill adb, unplug phone, plug back in after a few seconds, try rooting again. you could also try installing adb with pda.net drivers or droid explorer.

 

[lfom]

I've never used SOC before, but I think I have read that you firt enable "shell root" in order to get su in adb and then you can fully root tablet as well... Someyhing like this.

steev has created a way to do it manually in 2.3 for 7024, it may work for you:
http://www.androidtablets.net/forum...hread-add-your-custom-roms-17.html#post136424

 

[crazythunder]

I've never used SOC before, but I think I have read that you firt enable "shell root" in order to get su in adb and then you can fully root tablet as well... Someyhing like this.

steev has created a way to do it manually in 2.3 for 7024, it may work for you:
http://www.androidtablets.net/forum...hread-add-your-custom-roms-17.html#post136424

you're right, because i tried the normal root option with no luck on my 7127. i had to use shell root.

 

[barcodelinux]

steev has created a way to do it manually in 2.3 for 7024, it may work for you:
http://www.androidtablets.net/forum...hread-add-your-custom-roms-17.html#post136424

All variations of that method require the /system partition to be mounted as rw and in the 7120, it is mounted as ro. Therefore this will not work. But I appreciate the help fellas, I really do.

 

[barcodelinux]

do you have anything else running that might be using adb? like droid explorer? try going into task manager and kill the adb service. then try it again. if that fails, kill adb, unplug phone, plug back in after a few seconds, try rooting again. you could also try installing adb with pda.net drivers or droid explorer.

I did not try the pda.net method though. I just downloaded adb from google, installed it. It prompted me to install java JDK, so I did and continued with the adb install. Once I got everything up and running, and before firing up SOC, I ran adb devices to make sure that I could see it. It reported the serial number and as "device" so the laptop could see the tablet. That's when I fired up SOC and ran into those problems listed above. The problem I was having was that there is ZERO documentation on the developers site on how to use SOC. I started with "Root" and when that didn't work, I went to "Shell Root".

I spent about 4 hours last night trying to root this thing without success. I google'd around and found out about the multiple adb processes. I tried many times (both root and shell root) with taskmgr.exe open and actively killing all but the first adb.exe process. I tried unplugging the device and starting over, even rebooting my xp install. (God I hate windows!)

This is actually a christmas present for the wife so I have limited time to play with this thing. I will try again tonight and report back.

 

[barcodelinux]

I wonder if there is a way to mount the /system partition while in the android recovery mode using adb. That way I can edit /etc/fstab (or whatever its called in android) and set the /system partition to mount as rw at boot. That way when it boots, I can push the files needed to the /system partition, chmod them, and execute them and finally get this thing rooted. Then before I reboot, edit /etc/fstab again to make /system mount as rw by default.

Maybe?? I will try it here in a few.

EDIT: Nope!! I was thinking of CWM recovery. The stock android recovery is VERY limited in what it can do.

 

[barcodelinux]

Ok, I tried the SOC method again just for grins. No dice. Everytime I click on Root or Shell Root, 2 adb.exe processes start and if I kill one of them, SOC stops what it was doing and goes back to where it started.

I tried building an update.zip package with a script that would install the su, busybox, and psneuter binaries AND CWM recovery. No dice.

I tried Universal Androot v1.6.1. No dice.

Anyone got any ideas? I can't be the only one with this tablet that wants to root it.

 

[rafi]

I'm definitely waiting for a rooting walkthrough, some ROMs, flash installation, and an update to market.

VTL.Launcher v.1.6.5 works great on the 7120, BTW.

 

[barcodelinux]

I have given up. I put it up on CL yesterday and sold it a few hours ago. It's too bad.

This could have been a cool little toy to play with. Good luck to all of you who still have this tablet.

 

[pearljame]

I managed to do Root:
[h=2]SuperOneClick v2.3.1 - Automatic Driver Installation![/h]
Download
[APP]SuperOneClick v2.3.1 - Automatic Driver Installation! - xda-developers

Extract the file, open as administrator and go into Driver Update, after you install the drive click Root, when to stop with the message waiting device click again in Root that will work ... (Tested in Windows 7 Ultimate)

* daemon not running. starting it now on port 5037 *
* daemon started successfully *
export PS1=""



getprop ro.build.version.release > /data/local/tmp/output 2>&1

export TEMPRANDOM=46438

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

$ export PS1=""



getprop ro.build.version.release > /data/local/tmp/output 2>&1

export TEMPRANDOM=46438

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

2.3.3

END:46438export PS1=""



getprop ro.product.manufacturer > /data/local/tmp/output 2>&1

export TEMPRANDOM=38662

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

telechips

END:38662export PS1=""



getprop ro.product.model > /data/local/tmp/output 2>&1

export TEMPRANDOM=34329

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

MID7120

END:34329export PS1=""



getprop ro.build.version.incremental > /data/local/tmp/output 2>&1

export TEMPRANDOM=19523

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

20110905.113235

END:19523export PS1=""



ls -l /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=44641

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/xbin/su: No such file or directory

END:44641export PS1=""



ls -l /system/bin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=79027

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/bin/su: No such file or directory

END:79027export PS1=""



chmod 755 /data/local/tmp/busybox > /data/local/tmp/output 2>&1

export TEMPRANDOM=99210

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:99210export PS1=""



chmod 700 /data/local/tmp/psneuter > /data/local/tmp/output 2>&1

export TEMPRANDOM=86651

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:86651export PS1=""



cd /data/local/tmp/ > /data/local/tmp/output 2>&1

export TEMPRANDOM=10856

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:10856export PS1=""





export TEMPRANDOM=56598;export PS1=END:$TEMPRANDOM;./psneuter

Failed to set prot mask (Inappropriate ioctl for device)

END:56598export PS1=""

export PS1=""



/data/local/tmp/busybox mount -o rw,remount /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=52265

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:52265export PS1=""



/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=50323

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/mtdblock2 on /system type yaffs2 (ro,relatime)

/dev/block/mtdblock5 on /data type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/mtdblock4 on /cache type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/vold/240:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0602,dmask=0602,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

/dev/block/vold/240:1 on /mnt/secure/asec type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0602,dmask=0602,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

tmpfs on /mnt/sdcard/.android_secure type tmpfs (ro,relatime,size=0k,mode=000)

END:50323export PS1=""



/data/local/tmp/busybox mount -o rw,remount /dev/block/mtdblock2 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=64526

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: permission denied (are you root?)

END:64526export PS1=""



/data/local/tmp/busybox mount > /data/local/tmp/output 2>&1

export TEMPRANDOM=87999

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

none on /acct type cgroup (rw,relatime,cpuacct)

tmpfs on /mnt/asec type tmpfs (rw,relatime,mode=755,gid=1000)

tmpfs on /mnt/obb type tmpfs (rw,relatime,mode=755,gid=1000)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/mtdblock2 on /system type yaffs2 (ro,relatime)

/dev/block/mtdblock5 on /data type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/mtdblock4 on /cache type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/vold/240:1 on /mnt/sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0602,dmask=0602,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

/dev/block/vold/240:1 on /mnt/secure/asec type vfat (rw,dirsync,nosuid,nodev,noexec,noatime,nodiratime,uid=1000,gid=1015,fmask=0602,dmask=0602,allow_utime=0020,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

tmpfs on /mnt/sdcard/.android_secure type tmpfs (ro,relatime,size=0k,mode=000)

END:87999export PS1=""



mount -o rw,remount /dev/block/mtdblock2 /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=65570

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mount: Operation not permitted

END:65570* daemon not running. starting it now on port 5037 *
* daemon started successfully *
export PS1=""



$ export PS1=""



getprop ro.build.version.release > /data/local/tmp/output 2>&1

export TEMPRANDOM=45540

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

2.3.3

END:45540export PS1=""



getprop ro.product.manufacturer > /data/local/tmp/output 2>&1

export TEMPRANDOM=63925

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

telechips

END:63925export PS1=""



getprop ro.product.model > /data/local/tmp/output 2>&1

export TEMPRANDOM=47033

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

MID7120

END:47033export PS1=""



getprop ro.build.version.incremental > /data/local/tmp/output 2>&1

export TEMPRANDOM=13248

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

20110905.113235

END:13248export PS1=""



ls -l /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=97268

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/xbin/su: No such file or directory

END:97268export PS1=""



ls -l /system/bin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=93376

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

/system/bin/su: No such file or directory

END:93376export PS1=""



chmod 755 /data/local/tmp/busybox > /data/local/tmp/output 2>&1

export TEMPRANDOM=78875

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:78875export PS1=""



rm /data/local/tmp/boomsh > /data/local/tmp/output 2>&1

export TEMPRANDOM=72897

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rm failed for /data/local/tmp/boomsh, No such file or directory

END:72897export PS1=""



rm /data/local/tmp/sh > /data/local/tmp/output 2>&1

export TEMPRANDOM=48380

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

rm failed for /data/local/tmp/sh, No such file or directory

END:48380export PS1=""



chmod 700 /data/local/tmp/zergRush > /data/local/tmp/output 2>&1

export TEMPRANDOM=47779

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:47779export PS1=""



cd /data/local/tmp/ > /data/local/tmp/output 2>&1

export TEMPRANDOM=34177

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:34177export PS1=""





export TEMPRANDOM=37467;export PS1=END:$TEMPRANDOM;./zergRush



[**] Zerg rush - Android 2.2/2.3 local root

[**] (C) 2011 Revolutionary. All rights reserved.



[**] Parts of code from Gingerbreak, (C) 2010-2011 The Android Exploid Crew.



[+] Found a GingerBread ! 0x00000118

[*] Scooting ...

[*] Sending 149 zerglings ...

[+] Zerglings found a way to enter ! 0x10

[+] Overseer found a path ! 0x00016180

[*] Sending 149 zerglings ...

[+] Zerglings caused crash (good news): 0x40119cf4 0x0064

[*] Researching Metabolic Boost ...

[+] Speedlings on the go ! 0xafd253af 0xafd3940f

[*] Popping 8 more zerglings

[*] Sending 157 zerglings ...



[+] Rush did it ! It's a GG, man !

[+] Killing ADB and restarting as root... enjoy!

export PS1=""



# export PS1=""



/data/local/tmp/busybox mount -o rw,remount /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=60715

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:60715export PS1=""



mkdir /system/xbin > /data/local/tmp/output 2>&1

export TEMPRANDOM=25430

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

mkdir failed for /system/xbin, File exists

END:25430export PS1=""





export TEMPRANDOM=83289;export PS1=END:$TEMPRANDOM;/data/local/tmp/busybox cat /data/local/tmp/1018263.tmp > /system/xbin/su

END:83289export PS1=""

export PS1=""



/data/local/tmp/busybox rm /data/local/tmp/1018263.tmp > /data/local/tmp/output 2>&1

export TEMPRANDOM=66396

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:66396export PS1=""



chown 0:0 /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=93601

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:93601export PS1=""



chmod 6755 /system/xbin/su > /data/local/tmp/output 2>&1

export TEMPRANDOM=39633

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:39633export PS1=""





export TEMPRANDOM=28720;export PS1=END:$TEMPRANDOM;/data/local/tmp/busybox cat /data/local/tmp/5383828.tmp > /system/app/Superuser.apk

END:28720export PS1=""

export PS1=""



/data/local/tmp/busybox rm /data/local/tmp/5383828.tmp > /data/local/tmp/output 2>&1

export TEMPRANDOM=77310

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:77310export PS1=""



busybox true > /data/local/tmp/output 2>&1

busybox: not found

export TEMPRANDOM=82687

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:82687export PS1=""



/data/local/tmp/busybox mount -o ro,remount /system > /data/local/tmp/output 2>&1

export TEMPRANDOM=85977

export PS1=END:$TEMPRANDOM;cat /data/local/tmp/output

END:85977