@Syndacate:
You should first back up the apps you installed with Titanium, because the process I'm gonna suggest will get rid of all data and put you back to unrooted stock state. Once you get a replacement phone, you can re-root and easily restore your apps.
First, download the Samsung drivers and Odin (software that runs on your PC) from the OP in
this thread at Fascinate Forums. Install the drivers to your PC and copy Odin to your desktop or some other location where you can easily find it. Then go to
this link over at XDA forums to get the full "DL09.tar.md5" file from the OP. Save that somewhere on your PC. Next, follow these steps:
1. Put your phone into download mode, as follows:
- Connect the USB cable that came w/ the phone to your computer.
- Turn off the phone & pull the battery.
- Hold the volume down button and plug the USB cable into the phone (you should see a yellow triangle w/ an Android digging).
2. Open Odin on your computer (you should see a yellow bar indicating that your phone is connected to a COM port).
3. Click the "PDA" button (DO
NOT CLICK THE "PHONE" BUTTON) and select the "DL09.tar.md5" file you downloaded to your computer earlier.
4. Click "Start" and let the procedure finish. Disconnect your phone when you see a green box in Odin that says "PASS."
5. Put the battery back in and turn your phone on.
If all goes as it should, your phone will be unrooted & back to stock, ready for you to take in to Verizon. This will be build DL09 (you can verify by going to
Settings >
About phone and checking
Baseband version and
Build number). You can also set up the phone w/ your Gmail account & get all your emails back.
When you get your new phone w/ functional camera, come on over to
Fascinate Forums. We can get you re-rooted and up & running w/ Froyo. Good luck!
Wow, I feel bad that you wrote that and I was just about to come back and say I was actually making some head-way. Okay, so I gathered the basic concept of this root, and decided to take a stab at it externally. I got the binary onto the phone, ran it, got the root in.
I then had trouble pushing busybox and su due to the ro filesystem, I fixed that by remounting the fs as rw, using this line:
mount -o rw,remount -t ext3 /dev/block/mmcblk1p21 /system
It took like 3x before that line actually did something (2 typos maybe, but doubtful), but it finally remounted the fs after unplugging it and plugging back in.
Then I was able to re-push the su, busybox bins, as well as the Superuser.apk package. I then set the permissions to 4755 to make them acessable from terminal to give R/X perms to everybody.
I then went into the terminal emulator, typed su, and got the prompt for root access, which I allowed, and I got a root shell. FINALLY.
I didn't bother re-mounting the FS as RO because I'm going to undo all of this.
----- Now to unroot
I'd like to avoid re-flashing if at all possible
Right, so obviously still fails to contact camera every time, so still want to take it back, so now for the unrooting.
Obviously it just replaced the su and busybox binaries, I'm assuming that I need to replace them with the OEM ones (are there OEM ones, or were these just from the original root)?
As I said before, I have no trouble doing things from the CLI (big linux guy, here), and I rather do so, then let a script blindly do it and me keeping my fingers crossed.
So now what should I do to unroot, I'm guessing su existed, it was just an unhacked version, I'm thinking busybox could have gone either way, so I'm not sure if I should just remove them, or look for OEM replacements.
As for the Superuser.apk package, I'm assuming I can't just rm that, right?
Then there's the exploit binary, the rage image which pushes the actual exploit...I'm not sure where it pushes the exploit, but now I got to get whatever it screwed with, back to its OEM state...no idea how to do that.
Okay, so now that I understand the system a lot more, understand how this root works a lot better, I'm much happier, haha. That being said, now that this is full rooted, I need to unroot this now.
What would you say is the best course of action for me for a manual unroot?
EDIT:
PS: The FS will remount as RO on reboot, won't it? Should follow whatever is in the mount list (fstab?), so I shouldn't even need to remount it manually as RO as long as I restart..
PPS: As for the
first root procedure I did (the original one), I looked at the files, not sure where titanium backup came in, but in essence it was the drivers for Galaxy S (which I had to reinstall for adb to see the phone, ironically enough), the rage bin, su, busybox, Superuser.apk, and a script to do all of the rooting for you, the adb shell, and the requried adb runtime libraries. That's why I had no idea what happened when I rooted, it just ran the local shell it had, pushed everything to the phone, kicked it off, and that was that.
.
. I'll try running rage externally when I get back.