Root access

m (How to become root moved to Root access: Midgard rename)
m (Reverted edits by 5.188.211.16 (Talk) to last revision by sixwheeledbeast)
 
(98 intermediate revisions not shown)
Line 1: Line 1:
-
OK, first, the disclaimer:
+
{{danger}}
-
~+**Doing whatever is stated on this page is not endorsed by Nokia in any way.
+
Having [[:wikipedia:Superuser|root]] access is an important step for users interested in modifying things "under the covers" of their tablets; without it, you won't have the necessary permissions to make those modifications. Root access is disabled by default on new tablets. Thankfully, the steps to enable root access are simple.
-
Warning: There have been reports of display failures (white with dim vertical stripes) after disabling rd mode and rebooting a new 770. If you get this, there is a hardware failure in your device and you need to return it and get a replacement.
+
== Why do I want root? ==
-
Screenshot added: [http://www.circuitwizard.de/misc/2935.jpg Cracked screen]<nowiki>; </nowiki>[http://maemo.org/pipermail/maemo-users/2006-July/001605.html Screen bug Post]. --Aswarp 060802
+
Root access is ''not'' required to install additional applications through Application Manager, open X Terminal or use your tablet in day-to-day operation.
-
= The straightforward way =
+
If you want to edit the underlying system configuration, install applications ''through the command line'' or other low-level tasks, you ''will'' require root access.
-
=== 1 ) Install the becomeroot package. ===
+
== rootsh ==
 +
<small>''Note: As rootsh is the simplest option, and does not require a desktop computer or running additional services, it is the recommended method for gaining root access.''</small>
-
Install the becomeroot package. I found this by searching http://gronmayer.com/it/ .
+
<code>rootsh</code> is available in [[Extras]], and can be installed from the Application manager if you have the Extras repository enabled. It is also available directly from [http://maemo.org/downloads/product/Maemo5/rootsh/ maemo.org].
-
=== 2 ) Run <code>sudo gainroot</code>. ===
+
Then, from the [[terminal|shell]], run:
 +
sudo gainroot
 +
(or <code>root</code> for short). This will give you a root shell.
-
From the shell run <code>sudo gainroot</code>. This will give you a root shell.
+
== sudser ==
 +
<small>''Note: Some scripts require rootsh to run properly, so it's recommended to have both sudser and rootsh installed if you're using sudser.''</small>
-
This package works in the simplest possible way: the application gainroot is added to /etc/sudoers to be run without prompting for a password, and all it does is set the path to something sensible and run /bin/sh.
+
sudser adds the user to sudoers so you can use the <code>sudo</code> command to run commands as root.  
-
(I don't know what all the other stuff on this page is for: this is simple and works easily.)
+
It is available in Extras, and can be installed from the Application manager if you have Extras enabled.  
-
= The 'easiest' way (install dropbear) =
 
-
=== Step 1: Install Xterm and Dropbear ===
+
Then, from the shell, run <code>sudo ''command''</code>. This will execute <code>''command''</code> with root privileges.
-
Point your browser to [http://maemo.org/maemowiki/ApplicationCatalog2006#head-2d42cafb5ff039b13a08aa190409dd6c1e108f30 Xterm] DEB and then to [http://www.komputika.net/maemo/index.php?search=dropbear&amp;dir=&amp;searchMode=f Dropbear] DEB and grab latest [http://matt.ucc.asn.au/dropbear/dropbear.html Dropbear] version.
+
<small>''Note: Adding user to the sudoers without a password isn't best for security so use at own risk.''</small>
-
If you have installed ssh or openssh, you will have to uninstall them first.
+
== OpenSSH ==
-
Wait for the installation to complete and...
+
# Enable Extras (if it is disabled)
 +
# Install OpenSSH (client and server)
 +
#* This will prompt you to change the root password from the default, <code>rootme</code>
 +
# SSH into your tablet as root
 +
#* For local access, run <code>ssh root@localhost</code>
 +
#* For remote access, run <code>ssh root@''tablet's ip address''</code>
 +
# Use the root password entered at step (2) to log in
-
----
+
To debug issues with SSH connections, use the SSH '-v' option.
-
=== Step 2: SSH to your Internet Tablet ===
+
(To get SSH X forwarding ('-X' option) to work, you need to install ''xauth'' (or ''xbase-clients'') package and enable X forwarding in the SSH server configuration file on the machine where you're connecting to.)
-
==== Option A: Via LAN ====
+
== Research &amp; Development Mode (R&amp;D or RD Mode) ==
-
ssh root@aaa.bbb.ccc.ddd &lt;- change this to the ip address assigned to your Internet Tablet
+
{{ambox|text=As R&D mode has other side effects beyond simply enabling root access (including several that may negatively impact battery life), it is ''not'' the recommended method for gaining root access. Use [[#rootsh|rootsh]] instead.}}
-
==== Option B: Via Local Access ====
+
{{main|R&D mode}}
-
ssh root@localhost
+
You can enable the R&D mode which enables you to execute <code>sudo gainroot</code> to get a root shell, simply follow the setup steps for flashing covered in [[Updating the firmware|updating the tablet firmware]], then execute
-
When requested use "rootme" as password (this is the factory default root password)
+
sudo ./flasher-3.5 --enable-rd-mode -R
-
----
+
You are now in R&D mode, and the sudo gainroot script's check will be satisfied.
-
=== Step3: You Have Root, BUT ===
+
== On-Device Sudoers Edit (No External Dependencies) ==
 +
This covers how to get root access on-device. without any external downloads/dependencies, as well as advocates a more desktop-like approach to setting up your sudoers file.
 +
http://talk.maemo.org/showthread.php?t=94494
-
At this point you should have gained root access to your device, and be looking at the root prompt:
+
== A note on sudo ==
 +
This information is aimed at people who come to maemo from other linux distributions (Debian for example) that may have used sudo in a different way.
-
<nowiki>#</nowiki>
+
In fremantle (Maemo 5) sudo is a key part of the system. It is used by system processes that are started as the user to provide access (as root) when needed.
-
'''However, if your wi-fi network is not password protected, so might anyone else near you who has Wi-Fi, SSH and a clue.'''
+
Examples of this are:
 +
Media Tracker.
 +
The firmware version on the 'Settings' > 'About Product' page.
-
You still need to secure your own future root-level access.
+
Both of these will malfunction if there are problems with sudo.
-
You also still need to secure the root account -- "rootme" is a terrible password, and direct root log-in access is not necessarily required.
+
Sudo relies on <code>/etc/sudoers</code>, a configuration file that details who can run what commands. <code>/etc/sudoers</code> is traditionally modified by using the 'visudo' command. DO NOT DO THIS ON MAEMO. In maemo sudoers is regenerated periodically from config snippets in <code>/etc/sudoers.d/</code>, using <code>visudo</code> can cause the slow death of your system as your edit gets pushed further down /etc/sudoers.
-
----
+
For those who don't know, <code>/etc/sudoers</code> works on a last match principle, so if your edit conflicts with entries above it, it will break those entries.
-
=== Step 4: Secure Future Root-Level Access ===
+
The 'correct' way to do this would be to put your entry in a file in <code>/etc/sudoers.d/</code>. I leave the detail of this up the experience of the end-user. Just be advised that using <code>visudo</code> runs the risk of subtly breaking your system.
-
==== Option A ====
+
[[Category:Wiki page of the day]]
-
 
+
[[Category:Power users]]
-
'Fix' the original /usr/sbin/gainroot script to not to check for R&amp;D mode and allow root everytime.
+
-
 
+
-
You can edit line
+
-
 
+
-
MODE=<code>/usr/sbin/chroot /mnt/initfs cal-tool --get-rd-mode</code>
+
-
 
+
-
to be
+
-
 
+
-
MODE=enabled #<code>/usr/sbin/chroot /mnt/initfs cal-tool --get-rd-mode</code>
+
-
 
+
-
You can use vi editor for this, enter
+
-
 
+
-
vi /usr/sbin/gainroot
+
-
 
+
-
position cursor at '=' character, press 'a' key, enter 'enabled #', press Esc key and save and exit with 'ZZ' command (shift + zz). The edited line may look garbled but it is OK. CTRL+L refreshes screen in vi so you can double check before saving.
+
-
 
+
-
From now you can use the intended way how to gain root on the device in R&amp;D mode without having to set it.
+
-
 
+
-
$ sudo gainroot
+
-
 
+
-
==== Option B ====
+
-
 
+
-
Set the [http://en.wikipedia.org/wiki/Password_strength password] for 'user':
+
-
 
+
-
passwd user
+
-
 
+
-
Note: when typing a password nothing will be shown on the screen.
+
-
 
+
-
Now, for the future, unless you want to keep SSH-ing from another machine, a clever move is to add "user" to sudoers:
+
-
 
+
-
echo "user ALL = PASSWD: /bin/su" &gt;&gt; /etc/sudoers
+
-
 
+
-
this way your password will be asked in order to become root. Or
+
-
+
-
echo "user ALL = NOPASSWD: /bin/su" &gt;&gt; /etc/sudoers
+
-
 
+
-
in order to become root without having to type your password.
+
-
 
+
-
Please keep in mind that password will be cached, so you won't have to type it ''every'' time you need to sudo.
+
-
 
+
-
Note that if you require a password to become sudo, some built-in apps (notably Application Manager) will appear to not load while they wait silently in the background for the password to be entered. The can be avoided by running a command in the xterm with sudo prior to lauching the app, so as to appease sudo when the OS calls it.
+
-
 
+
-
Ok, from now on all you have to do, in your Xterm session, to get root is to write:
+
-
 
+
-
sudo su -
+
-
 
+
-
----
+
-
 
+
-
=== Step 5: Secure the Root Account ===
+
-
 
+
-
== You '''MUST''' change (or disable) your root password before continuing!! ==
+
-
 
+
-
Else you will be walking around with a device that can be accessed using a TRIVIAL and well known password.
+
-
 
+
-
----
+
-
 
+
-
==== Option A: If you elect not to disable direct root logins ====
+
-
 
+
-
To change root password (as root user):
+
-
 
+
-
passwd
+
-
 
+
-
...when asked, input (twice) your [http://en.wikipedia.org/wiki/Password_strength new password].
+
-
 
+
-
'''It is still recommended to limit root logins to local console only in most cases.'''
+
-
 
+
-
==== Option B: To disable root login ('''highly suggested''') ====
+
-
 
+
-
'''NOTE:''' Do not perform this step without having completed Step 4A or 4B.
+
-
 
+
-
After you gained access as root user:
+
-
 
+
-
passwd -l root
+
-
 
+
-
In this case, from now on you won't be able to login directly as root user -- not from ssh and not from the local console.
+
-
 
+
-
To get a root prompt:
+
-
 
+
-
sudo su -
+
-
 
+
-
comments and questions [/WilliamMaddler|maddler]
+
-
 
+
-
----
+
-
 
+
-
=== Step 6: Disabling root login when using Dropbear ===
+
-
 
+
-
This step is semi optional. Definitely recommended for most installations, though.
+
-
 
+
-
When using dropbear as ssh server, you can disable root logins via ssh: just add the option "-w" to DROPBEAR_EXTRA_ARGS in /etc/default/dropbear:
+
-
 
+
-
DROPBEAR_EXTRA_ARGS="-w"
+
-
 
+
-
After that, restart dropbear:
+
-
 
+
-
/etc/init.d/dropbear restart
+
-
 
+
-
A remote root login via ssh is then no longer possible. So you have to use the "user" account (you should give the user a password beforehand).
+
-
 
+
-
----
+
-
 
+
-
=== Step 99: For Windows Users Only ===
+
-
 
+
-
Obviously the same trick works also in Windows, but you have to use a (free or commercial) SSH enabled client:
+
-
*[http://www.celestialsoftware.net/telnet/ Absolute Telnet]
+
-
*[http://www.vandyke.com/download/securecrt/index.html SecureCRT]
+
-
*[http://www.chiark.greenend.org.uk/~sgtatham/putty/ PuTTY], etc...
+
-
 
+
-
= The R&amp;S way (Nokia 770 only) (Linux or Mac OS X needed) =
+
-
 
+
-
You can enable the Research &amp; Development mode (R&amp;D or RD mode) on the 770, which enables you to execute <code>sudo gainroot</code> to get a root shell.
+
-
 
+
-
NOTE: The currently availiable Nokia flasher version (as of 30 March 2006) assumes that usbfs is mounted on /proc/bus/usb, but usbfs is deprecated and has been dropped on most newer Linuxes. If you find that flasher doesn't recognise that the device is connected and you have a kernel version &gt;= 2.6.15, this is probably the issue.
+
-
 
+
-
* Download the Linux or Mac OS X flasher from
+
-
* Ensure it's executable: <code>chmod a+x &amp;quot;flasher...&amp;quot;</code>
+
-
* Switch off the Nokia 770
+
-
* Unplug it from a charger
+
-
* Connect it to your computer via USB directly (hubs can prevent the flasher from detecting the device)
+
-
* From your computer: As root, or using <code>sudo</code>, execute <code>./flasher &amp;lt;del&amp;gt;enable-rd-mode &amp;lt;/del&amp;gt;reboot</code>
+
-
* "Suitable USB device not found, waiting" is displayed on the console
+
-
* Switch on the 770 using the power button while holding down the home button ''I did not touch the home button and proceeded successfully -- 2005-12-27'' --RickHull It worked for me after disabling the device lock -- 05/04/06 Florian I did it without the home button as well and it worked OK for me too. -- 3/26/06 -- Bill B. Well, I just did it for the first time with my one-day-old tablet, and I did have to press the home button. Otherwise, the device booted normally, and no messages came from the flasher utility (from Mac OS X). When pressing home, you get the icon for the "system settings" (a wrench over a tablet) right under the big blue NOKIA logo at boot up. The USB logo appeared in the top-right corner of the screen on both boot-ups, the normal one and the one with the home button. -- [AlbertoGonzalezPalomo]
+
-
* Whilst it powers on you'll see additional debug information.
+
-
* The flasher program will now tell you something like: USB device found at bus 001, device address 004 Found board Nokia 770 (F5) NOLO version 0.9.0 The device is now in R&amp;D mode ''I had to pull the USB cable at this point before the unit rebooted. -- 2006-03-29 -- [NealMcBurnett''] ''Me too -- 2006-04-01 -- N7DR''
+
-
* If not already done install an [http://770.fs-security.com/xterm/ xterm] on the 770
+
-
* Open the xterm and execute <code>sudo gainroot</code> ''You will probably get a scary message pointing you the possibility of breaking your device doing so. Ignore it ¿?''
+
-
* Try this if it doesn't work: <code>sudo /usr/sbin/gainroot</code>
+
-
 
+
-
That's it. If you get the error, "Error claiming USB interface: Operation not permitted", it means you've forgotten to run the flasher as root. It is possible to encounter other errors (even if invoked as root) that may be caused by timing issues. For more information and a possible solution, go to the following maemo-developers [http://www.gossamer-threads.com/lists/maemo/developers/3140 thread].
+
-
 
+
-
Once becoming root, in order to easily become root without needing to be in R&amp;D mode, modify the gainroot script (located in /usr/sbin/gainroot) to only invoke the shell (i.e. /bin/sh) or modify /etc/sudoers to make something like su sudo-capable. (IT'D BE NICE IF someone uploaded samples of the original and the modified file to the wiki at this point) Modifying gainroot is likely an easier option for novice users and should be accomplished by commenting out (i.e. prepending lines with a #) the check if R&amp;D mode is enabled. More specifically, after the "PATH=..." line, comment out the following lines ''except'' for the /bin/sh line.
+
-
 
+
-
<del>BEFORE</del>
+
-
 
+
-
+
-
 
+
-
= <nowiki>!/bin/sh -e</nowiki> =
+
-
 
+
-
trap exit SIGHUP SIGINT SIGTERM PATH=/bin:/user/bin:/sbin:/usr/sbin MODE='/usr/sbin/chroot /mnt/initfs cal-tool --get-rd-mode if [ x<span class="math">''MODE''<nowiki>=</nowiki>''xenabled'']''then''''echo''&amp;''quot''<nowiki>;</nowiki>''Root''''shell''''enabled''&amp;''quot''<nowiki>;/</nowiki>''bin''/''sh''''else''''echo''&amp;''quot''<nowiki>;</nowiki>''Enable''''RD''''mode''''if''''you''''want''''to''''break''''your''''device''&amp;''quot''<nowiki>;</nowiki>''fi''&lt;/''pre''&gt;&lt;''del''&gt;''AFTER''&lt;/''del''&gt;&lt;''pre''&gt;#!/''bin''/''sh''-''e''''trap''''exit''''SIGHUP''''SIGINT''''SIGTERM''''PATH''<nowiki>=/</nowiki>''bin''<nowiki>:/</nowiki>''user''/''bin''<nowiki>:/</nowiki>''sbin''<nowiki>:/</nowiki>''usr''/''sbin''<nowiki>#</nowiki>''MODE''<nowiki>='/</nowiki>''usr''/''sbin''/''chroot''/''mnt''/''initfs''''cal''-''tool''--''get''-''rd''-''mode''<nowiki>#</nowiki>''if''[''x''</span>MODE = xenabled] #then # echo "Root shell enabled" /bin/sh #else # echo "Enable RD mode if you want to break your device" #fi
+
-
 
+
-
There are a couple of possibilities for modifying gainroot or /etc/sudoers, both of which require [http://770.fs-security.com/xterm/ xterm]<nowiki>: * The file can be copied to another system (via USB or </nowiki>[http://maemo.org/maemowiki/InstallSsh scp] as examples), modified on the system, and copied back. In order to use USB, it will first be necessary to copy the appropriate file to the memory card using something like: <code>cp /usr/sbin/gainroot /media/mmc1</code> . A similar cp command (<code>cp /media/mmc1/gainroot /usr/sbin</code>) would be used to copy a modified gainroot file back. MMC is disabled while USB cable is connected. I had to power down, disconnect, reboot and become root again to copy the file to the MMC. -- 3/26/06 -- Bill B. ''I just had to unplug the USB cable when using the MMC locally, and plug it back in to access it from my PC -- [NealMcBurnett''] * An editor can be used on the 770 itself to modify the file, such as [http://maemo.org/maemowiki/ApplicationCatalog#head-5a2314e34a0e247ce137af6a95b37ae8e7a74b83 vim] or [http://maemo.org/maemowiki/ApplicationCatalog#head-0d0749a7fc2a3aacd09cb5465171aeb0d0dd0e38 joe]. Novice users may find joe to be easier to use than vim. I couldn't get VIM or Joe to run -- they installed, but I could not find them. Maybe a newby thing? You can always email the gainroot file to yourself on another PC, edit it, and email it back. -- 3/26/06 -- Bill B. (_as with most user-installable utilities, make sure /var/lib/install/usr/bin is in your <span class="math">''PATH''-''hczim''_)*''How''''Do''''I''''Become''''Root''-''without''''using''''a''''text''''editor''(''backing''''up''''gainroot''''before''''modification''):&lt;''br''/&gt;`''cp''-''p''/''usr''/''sbin''/''gainroot''/''usr''/''sbin''/''gainroot''~&amp;''amp''<nowiki>;&amp;</nowiki>''amp''<nowiki>;</nowiki>''sed''-''i'''1,/''PATH''<nowiki>=/!</nowiki>''s''/^/#/;/''sh''</span>/s/#//' /usr/sbin/gainroot<code><nowiki>* How Do I Become Root - without using a text editor (by enabling sudo for all user commands):&lt;br /&gt;</nowiki></code>cp -p /etc/sudoers /etc/sudoers~ &amp;&amp; echo user ALL = NOPASSWD: ALL &gt;&gt; /etc/sudoers<code>Once root access has been granted, it is recommended to disable R&amp;amp;D mode. This can be accomplished by following the same instructions as for enabling R&amp;amp;D mode but using</code>./flasher &lt;del&gt;disable-rd-mode &lt;/del&gt;reboot<code>instead. - --- Spanish translation / Traducción al castellano (Skip for the rest of the english text, including &amp;quot;The hard way of gaining root&amp;quot;)
+
-
 
+
-
Translated:Aswarp (Spain) on 12/Abril/2006 Last edited on 02/Agosto/2006 Traduciré sólamente la primera parte del artículo:
+
-
~+**&amp;quot;EL MÉTODO FÁCIL PARA SER ROOT EN EL NOKIA 770&amp;quot;**+~ Si te gusta la traducción, colabora con más texto, desarrollos en castellano, ports de tus aplicaciones favoritas... lo que sea :)
+
-
~+**NOKIA NO RECOMIENDA EN ABSOLUTO HACER LO QUE SE INDICA EN ESTA PÁGINA. Si lo intentas, tu dispositivo puede quedar convertido en un bonito y caro pisapapeles (quedando totalmente inutilizado) y puede que tengas que mantener una embarazosa conversación con los técnicos de Nokia para lograr que vuelva a su ser (sin duda relacionada con el innombrable-puerto-oculto-específico-de-Nokia-situado-junto-a-la-batería)**+~ Aviso: Se han recibido informes de fallos en la pantalla (con franjas finas verticales) tras desactivar el modo R&amp;amp;D y reiniciar un 770 nuevecito. Si te ocurriera es que existe un defecto en el hardware de tu dispositivo y puedes pedir que te lo cambien -- [VilleRanki] Este fallo no debería tener nada que ver con el software. Las pantallas que se utilizan en el Nokia 770 se rompen a veces durante los primeros 5 o 10 encendidos. Si el tuyo sobrevive a esto, con toda seguridad sobrevivirá siempre -- [BooIiing] La mía falló tras cargar la batería toda la noche :( Parece que el dispositivo sigue funcionado excepto por la pantalla, que se muestra emborronada verticalmente, así que he podido copiar mis datos de las tarjetas MMC vía USB antes de llevarlo al distribuidor. -- Aswarp 060415 Fotografía añadida: [Pisapapeles caro](http://www.circuitwizard.de/misc/2935.jpg); [Post en la lista](http://maemo.org/pipermail/maemo-users/2006-July/001605.html). --Aswarp 060802 Me pasó esto en el 8º encendido. Vaya suerte, compré my 770 en los Estados Unidos pero vivo en Canadá, y Nokia (En Canada y USA) me ha dicho básicamente que no tengo modo alguno de obtener garantía por ello. Ahora tengo un pisapapeles caro de verdad. :P -- Unit3 Nota: En al menor un ordenador, el Flasher reinicia el ordenador cuando se flashea con wmware # El método más sencillo (instalar dropbear) Ver [HowDoiBecomeRoot2] para el método más sencillo de ganar acceso root en OS2006. No hace falta activar el modo I+D ni tampoco cables USB. # El método sencillo (se necesita un ordenador con Linux o Mac OS X) Tendrás que activar el modo Research &amp;amp; Development (Investigación y Desarrollo, I+D, R&amp;amp;D ó RD mode) en el Nokia 770, que te permitirá ejecutar 'sudo gainroot' para conseguir una shell de root. Esto significa que dejarás de ser un simple usuario de la máquina para convertirte en administrador, lo que te permitirá efectuar cualquier tipo de cambios en el sistema operativo de tu 770, en concreto los reservados al [SuperUsuario] (su). NOTA: La versión que está disponible actualmente del flasheador de Nokia (a 30 de Marzo de 2006) asume que usbfs (USB File System o Sistema de Archivos del Bus Serie Universal) está montado en el directorio /proc/bus/usb, pero usbfs está depreciado y se ha dejado de mantener en muchos sistemas Linux modernos. Si te encuentras con que el flasher no reconociera que se ha conectado el dispositivo (Nokia 770 Internet Tablet) y tu ordenador tiene una versión del kernel de Linux posterior a la 2.6.15, seguro que el problema está ahí. * Descarga el flasheador para Linux o Mac OS X (dependiendo de cuál sea el Sistema Operativo de tu ordenador. ¿Cuándo habrá uno para Windows?¿¿Es posible/deseable que lo haya??) desde la página * Asegúrate que es ejecutable:</code>chmod a+x "flasher..."<code><nowiki>* Apaga tu Nokia 770 * Desconecta el cargador si es necesario * Conéctalo a tu ordenador por el puerto USB directamente (En ciertos casos, los hubs o 'concentradores de red' pueden evitar que el flasheador reconozca tu dispositivo) * Desde tu ordenador: Como usuario root, o empleando el comando</nowiki></code>sudo<code>, ejecuta lo siguiente:</code>./flasher &lt;del&gt;enable-rd-mode &lt;/del&gt;reboot<code><nowiki>* Aparecerá un mensaje en la consola: &amp;quot;Suitable USB device not found, waiting&amp;quot; (Esperando la conexión de un dispositivo USB adecuado) * Enciende el 770 con el botón de encendido MIENTRAS mantienes apretada la tecla 'Home' _No toqué el botón Home y funcionó -- 2005-12-27_ --RickHull Me funcionó después de desactivar el bloqueo del dispositivo -- 050406 Florian &lt;br /&gt; También lo hice sin el botón Home y me funcionó bien. -- 3/26/06 -- Bill B. Bueno, lo hice la primera vez con mi dispositivo un día después de comprarlo y tuve que pulsar el botón Home. De no hacerlo, el dispositivo arrancaba normalmente y no aparecían los mensajes del programa flasheador (desde Mac OS X). Cuando sí se pulsa home, aparece el icono de &amp;quot;configuración del sistema&amp;quot; (una llave sobre un tablet) justo bajo el logo grande de Nokia al arrancar. El logo USB apareció en la esquina superior derecha de la pantalla en ambos arranques, el normal y el del botón Home pulsado. -- [AlbertoGonzalezPalomo] * Mientras arranca, verás información adicional de depuración de errores. * El programa flasheador te dirá algo así como: USB device found at bus 001, device address 004 Found board Nokia 770 (F5) NOLO version 0.9.0 The device is now in R&amp;amp;D mode Que significa: Se ha encontrado un dispositivo USB conectado al bus 001, la dirección del dispositivo es 004 Se ha encontrado una placa Nokia 770 (F5) NOLO versión 0.9.0 El dispositivo está en modo I+D _Tuve que quitar el cable USB en este punto antes de que se reiniciara la unidad. -- 2006-03-29 -- [NealMcBurnett_] _Yo también -- 2006-04-01 -- N7DR_ * Si aún no lo has hecho, instala [xterm](http://770.fs-security.com/xterm/) en tu 770. Debes tener suficiente espacio libre para ello, por supuesto. * Abre X-term y ejecuta</nowiki></code>sudo gainroot<code>_Probablemente te aparecerá un mensaje advirtiendo de la posibilidad de que te estés cargando el trasto. Ignóralo ¿?_ * Si lo anterior no funciona, el sistema no encuentra el ejecutable 'gainroot', por lo que debes especificar el directorio donde reside. Prueba con lo siguiente: :</code>sudo /usr/sbin/gainroot<code>Ya está. Si vieras el mensaje de error &amp;quot;Error claiming USB interface: Operation not permitted&amp;quot; (&amp;quot;Error al reclamar a la interfaz USB: No se permite la oepración&amp;quot;), significa que has olvidado ejecutar el flasheador como root (en tu ordenador). Es posible que aparezcan otros errores (incluso si se ejecuta como root) que pueden deberse a problemas de sincronización. Para más información y posibles soluciones, ve a la siguiente [hebra de desarrolladores de maemo](http://www.gossamer-threads.com/lists/maemo/developers/3140). Una vez que seas root, podrás activar el modo root fácilmente sin tener que estar en modo R&amp;amp;D (I+D) si modificas es script llamado 'gainroot' (situado en /usr/sbin/gainroot) para que invoque sólamentela shell (p.ej. /bin/sh) o bien modificar /etc/sudoers para hacer algo como su sudo-capable. (SERÍA BUENO QUE alguien subiera aquí, al wiki, unas muestras de los archivos antes y después de ser modificados) Modificar gainroot debería ser la alternativa más fácil para usuarios inexpertos y debe hacerse comentarizando (convirtiendo en comentarios, p.ej. precediendo las líneas con el símbolo #) la comprobación que se hace sobre si el modo R&amp;amp;D está activo. Más específicamente, tras la línea &amp;quot;PATH=...&amp;quot;, comentarizar las líneas siguientes _excepto_ la línea /bin/sh. Hay algunas alternativas para modificar gainroot o /etc/sudoers; ambas requieren [xterm](http://770.fs-security.com/xterm/): * Por seguridad, el archivo gainroot se debería copiar a otro sistema (por USB o [scp](http://maemo.org/maemowiki/InstallSsh) por ejemplo), modificarlo en el sistema y vuelto a copiar. Para poder usar USB, primero habrá que copiar el archivo correspondiente a la tarjeta de memoria usando algo como:</code>cp /usr/sbin/gainroot /media/mmc1<code>. Se podría utilizar un comando cp similar (</code>cp /media/mmc1/gainroot /usr/sbin<code>) para copiar el archivo gainroot modificado de vuelta. Como la tarjeta MMC queda desactivada mientras está conectado el cable USB, tuve que apagar, desconectar, reiniciar y conseguir root de nuevo para poder copiar el archivo a la MMAC. -- 3/26/06 -- Bill B. _Sólo tuve que desconectar el cable USB mientras utilizaba la MMC localmente, y volver a conectarlo para poder accederla desde mi PC -- [NealMcBurnett_] * Se puede utilizar un editor en el propio 770 para modificar el archivo, tal como [vim](http://maemo.org/maemowiki/ApplicationCatalog#head-5a2314e34a0e247ce137af6a95b37ae8e7a74b83) o bien [joe](http://maemo.org/maemowiki/ApplicationCatalog#head-0d0749a7fc2a3aacd09cb5465171aeb0d0dd0e38). Los uauarios inexpertos encontrarán que joe es más fácil de usar que vim. No pude lograr que funcionaran VIM ni Joe -- se instalaron, pero no pude encontrarlos. ¿Quizá es cosa de novatos?Maybe a newby thing? Siempre puedes emviarte el archivo gainroot a tí mismo para editarlo desde otro PC, y volver a enviártelo una vez modificado. -- 3/26/06 -- Bill B. (_como con la mayoría de utilidades instalables por el usuario, aseúrate de que /var/lib/install/usr/bin está en tu $PATH -hczim_) * ¿Cómo conseguir ser Root - sin usar un editor de texto? (haciendo copia de seguridad de gainroot antes de modificarlo):&lt;br /&gt;</code>cp -p /usr/sbin/gainroot /usr/sbin/gainroot~ &amp;&amp; sed -i '1,/PATH=/!s/^/#/;/sh$/s/#//' /usr/sbin/gainroot<code><nowiki>* ¿Cómo conseguir ser Root - sin usar un editor de texto? (activando sudo para todos los comandos del usuario):&lt;br /&gt;</nowiki></code>cp -p /etc/sudoers /etc/sudoers~ &amp;&amp; echo user ALL = NOPASSWD: ALL &gt;&gt; /etc/sudoers`
+
-
 
+
-
Una vez que hayas conseguido acceso root, se
+
-
 
+
-
[[Category:HowTos]]
+
-
[[Category:Midgard wiki]]
+

Latest revision as of 08:50, 11 April 2019

Image:Ambox_notice.png
 Some instructions here may cause serious problems. When unsure, see General precautions
Backing up your data is recommended. In case of trouble you might need to re-flash your device.


Having root access is an important step for users interested in modifying things "under the covers" of their tablets; without it, you won't have the necessary permissions to make those modifications. Root access is disabled by default on new tablets. Thankfully, the steps to enable root access are simple.

Contents

[edit] Why do I want root?

Root access is not required to install additional applications through Application Manager, open X Terminal or use your tablet in day-to-day operation.

If you want to edit the underlying system configuration, install applications through the command line or other low-level tasks, you will require root access.

[edit] rootsh

Note: As rootsh is the simplest option, and does not require a desktop computer or running additional services, it is the recommended method for gaining root access.

rootsh is available in Extras, and can be installed from the Application manager if you have the Extras repository enabled. It is also available directly from maemo.org.

Then, from the shell, run: 

sudo gainroot

(or root for short). This will give you a root shell.

[edit] sudser

Note: Some scripts require rootsh to run properly, so it's recommended to have both sudser and rootsh installed if you're using sudser.

sudser adds the user to sudoers so you can use the sudo command to run commands as root.

It is available in Extras, and can be installed from the Application manager if you have Extras enabled.


Then, from the shell, run sudo command. This will execute command with root privileges.

Note: Adding user to the sudoers without a password isn't best for security so use at own risk.

[edit] OpenSSH

  1. Enable Extras (if it is disabled)
  2. Install OpenSSH (client and server)
    • This will prompt you to change the root password from the default, rootme
  3. SSH into your tablet as root
    • For local access, run ssh root@localhost
    • For remote access, run ssh root@tablet's ip address
  4. Use the root password entered at step (2) to log in

To debug issues with SSH connections, use the SSH '-v' option.

(To get SSH X forwarding ('-X' option) to work, you need to install xauth (or xbase-clients) package and enable X forwarding in the SSH server configuration file on the machine where you're connecting to.)

[edit] Research & Development Mode (R&D or RD Mode)

Image:Ambox_notice.png
 As R&D mode has other side effects beyond simply enabling root access (including several that may negatively impact battery life), it is not the recommended method for gaining root access. Use rootsh instead.

Main article: R&D mode


You can enable the R&D mode which enables you to execute sudo gainroot to get a root shell, simply follow the setup steps for flashing covered in updating the tablet firmware, then execute 

sudo ./flasher-3.5 --enable-rd-mode -R

You are now in R&D mode, and the sudo gainroot script's check will be satisfied.

[edit] On-Device Sudoers Edit (No External Dependencies)

This covers how to get root access on-device. without any external downloads/dependencies, as well as advocates a more desktop-like approach to setting up your sudoers file. http://talk.maemo.org/showthread.php?t=94494

[edit] A note on sudo

This information is aimed at people who come to maemo from other linux distributions (Debian for example) that may have used sudo in a different way.

In fremantle (Maemo 5) sudo is a key part of the system. It is used by system processes that are started as the user to provide access (as root) when needed.

Examples of this are: Media Tracker. The firmware version on the 'Settings' > 'About Product' page.

Both of these will malfunction if there are problems with sudo.

Sudo relies on /etc/sudoers, a configuration file that details who can run what commands. /etc/sudoers is traditionally modified by using the 'visudo' command. DO NOT DO THIS ON MAEMO. In maemo sudoers is regenerated periodically from config snippets in /etc/sudoers.d/, using visudo can cause the slow death of your system as your edit gets pushed further down /etc/sudoers.

For those who don't know, /etc/sudoers works on a last match principle, so if your edit conflicts with entries above it, it will break those entries.

The 'correct' way to do this would be to put your entry in a file in /etc/sudoers.d/. I leave the detail of this up the experience of the end-user. Just be advised that using visudo runs the risk of subtly breaking your system.

Retrieved from "https://wiki.maemo.org/Root_access"