[ROOT] Rooting E/F on latest firmwares

[sectroyer]

very interesting...
i tried to install this at my Samsung UE55F9090 with T-FXP9DEUC-2221.0
The installation was without problems.
But no root

Interesting was, that my TV at the restart means: "It was discovered a malicious program. Some functions may be limited."

This method is still in beta and might not work on E series (it's mostly for F). For E series use zero firmware do downgrade and use Skype rooting method

[juusso]

FXP9 is F series, some kind of F9000...

[baldy]

@le0990
you have to use the auto start oscam script... /mntr/ect/init.d/03_01_libOSCAM.init

autostart o$scam:

with new run1.sh

Code: Select all

#!/bin/sh
# emergency skript exit to prevent boot loop
      for USB in ${1:- \
         /dtv/usb/sd* } ; do
         echo "checking $USB"
         sleep 1
         if [ -e $USB/STOP_SAMYGO ]; then
            "STOP found. Script exit..."
            exit 1
         fi
         if [ -e "$USB/SamyGO_data/samyext4.img" ]; 
         then
             samygo_data_dir="$USB/SamyGO_data"
         fi
      done
cd /tmp
if [ -f "/mnt/rcSGO" ]
then
    echo "SamyGO already started."
    exit 1
fi
if [ -z "$samygo_data_dir" ]
then
    echo "SamyGO_data not found."
    exit 1
fi
mkdir /tmp/bin
/mtd_exe/InfoLink/lib/unzip -o -P 12345 "$samygo_data_dir/data.zip" -d /tmp/bin/
chmod 777 /tmp/bin/*
/tmp/bin/busybox --install -s /tmp/bin
sync
export PATH=/tmp/bin:$PATH
export LD_LIBRARY_PATH=/tmp/bin:$LD_LIBRARY_PATH
sync
/tmp/bin/busybox tcpsvd -vE 0.0.0.0 21 /tmp/bin/busybox ftpd -w / &
/tmp/bin/remshd33 & #remshd shell on 33 port from now!
sync

ln -s /dev/loop3 /tmp/loopnone
sync
/tmp/bin/busybox losetup /tmp/loopnone  "$samygo_data_dir/samyext4.img"
/tmp/bin/busybox mount -o sync,exec /tmp/loopnone /mnt 
/tmp/bin/busybox --install -s /mnt/bin
sync  

cd / && /sbin/rmmod ARS_module > /dev/null 2>&1
echo " " >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "ls -la after rmmod ARS_module" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
ls -la /mnt/* >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "Starting rcSGO from run1.sh" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
/mnt/bin/busybox sh -x /mnt/rcSGO /mnt >> /mnt/sam.log 2>&1

echo " " >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "Starting UEP_killer.sh" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
sh -x /mtd_rwcommon/oscam/samyGOstart.sh >> /mtd_rwcommon/oscam/samyGO_start.log  2>&1
sleep 5
/tmp/bin/UEP_killer.sh &

ps | grep run.sh | grep -v grep | while read child_pid others
do
    echo "Killing child process $child_pid of run.sh"
    kill -9 $child_pid

and samyGOstart.sh modified in: /mtd_rwcommon/oscam/samyGOstart.sh

Code: Select all

#!/bin/sh

rm /mtd_rwcommon/oscam/libOSCAM.so.disabled

/mtd_rwcommon/oscam/samyGOoscam

Could you please specify your autostart oscam closer? where to put run1.sh script? i am little confused. i am running fw1118 on F7000.
Thank you

[zimpel]

@greenhorn no, the older method dont work:( at the Moment no Root and no Solution

[le0990]

@le0990
you have to use the auto start oscam script... /mntr/ect/init.d/03_01_libOSCAM.init

autostart o$scam:

with new run1.sh

Code: Select all

#!/bin/sh
# emergency skript exit to prevent boot loop
      for USB in ${1:- \
         /dtv/usb/sd* } ; do
         echo "checking $USB"
         sleep 1
         if [ -e $USB/STOP_SAMYGO ]; then
            "STOP found. Script exit..."
            exit 1
         fi
         if [ -e "$USB/SamyGO_data/samyext4.img" ]; 
         then
             samygo_data_dir="$USB/SamyGO_data"
         fi
      done
cd /tmp
if [ -f "/mnt/rcSGO" ]
then
    echo "SamyGO already started."
    exit 1
fi
if [ -z "$samygo_data_dir" ]
then
    echo "SamyGO_data not found."
    exit 1
fi
mkdir /tmp/bin
/mtd_exe/InfoLink/lib/unzip -o -P 12345 "$samygo_data_dir/data.zip" -d /tmp/bin/
chmod 777 /tmp/bin/*
/tmp/bin/busybox --install -s /tmp/bin
sync
export PATH=/tmp/bin:$PATH
export LD_LIBRARY_PATH=/tmp/bin:$LD_LIBRARY_PATH
sync
/tmp/bin/busybox tcpsvd -vE 0.0.0.0 21 /tmp/bin/busybox ftpd -w / &
/tmp/bin/remshd33 & #remshd shell on 33 port from now!
sync

ln -s /dev/loop3 /tmp/loopnone
sync
/tmp/bin/busybox losetup /tmp/loopnone  "$samygo_data_dir/samyext4.img"
/tmp/bin/busybox mount -o sync,exec /tmp/loopnone /mnt 
/tmp/bin/busybox --install -s /mnt/bin
sync  

cd / && /sbin/rmmod ARS_module > /dev/null 2>&1
echo " " >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "ls -la after rmmod ARS_module" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
ls -la /mnt/* >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "Starting rcSGO from run1.sh" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
/mnt/bin/busybox sh -x /mnt/rcSGO /mnt >> /mnt/sam.log 2>&1

echo " " >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
echo "Starting UEP_killer.sh" >> /mnt/sam.log 2>&1
echo "===========================" >> /mnt/sam.log 2>&1
sh -x /mtd_rwcommon/oscam/samyGOstart.sh >> /mtd_rwcommon/oscam/samyGO_start.log  2>&1
sleep 5
/tmp/bin/UEP_killer.sh &

ps | grep run.sh | grep -v grep | while read child_pid others
do
    echo "Killing child process $child_pid of run.sh"
    kill -9 $child_pid

and samyGOstart.sh modified in: /mtd_rwcommon/oscam/samyGOstart.sh

Code: Select all

#!/bin/sh

rm /mtd_rwcommon/oscam/libOSCAM.so.disabled

/mtd_rwcommon/oscam/samyGOoscam

Could you please specify your autostart oscam closer? where to put run1.sh script? i am little confused. i am running fw1118 on F7000.
Thank you

Sorry, run1.sh you find in FAT USB / SamyGO_data

[sectroyer]

MST users should now try MST-Fix from first post

[bartasdiver]

MST users should now try MST-Fix from first post

I can confirm, the fix works like a charm

Thank you!

[siegbrecht]

where can i find the info if i am on mst? f6370, cant see something in the menu? maybe in some hidden menu? how to get there?

[greenhorn]

siegbrecht
what is the model of the TV?
edit: f6370 is mst....

[zoelechat]

If firmware name contains MST, it's MST (eg. T-MST12DEUC_1120.0, mostly F5xxx/F6xxx models), else it's not