Mounting /system partition in read-write mode in Android

Any hacker needs full access to the system files to play with the system. Andoid /system partition is read-only by default. Here is an HOWTO to mount it in read-write mode. It is assumed that you have installed android SDK in your workstation. We use adb tool in tools directory of SDK.

1. Identifying the /system partition device file: Follow the sample session.

C:\android-sdk-windows-1.1_r1\tools>adb shell

$ su

# mount
rootfs / rootfs ro 0 0
tmpfs /dev tmpfs rw,mode=755 0 0
devpts /dev/pts devpts rw,mode=600 0 0
proc /proc proc rw 0 0
sysfs /sys sysfs rw 0 0
tmpfs /sqlite_stmt_journals tmpfs rw,size=4096k 0 0
/dev/block/mtdblock3 /system yaffs2 ro 0 0
/dev/block/mtdblock5 /data yaffs2 rw,nosuid,nodev 0 0
/dev/block/mtdblock4 /cache yaffs2 rw,nosuid,nodev 0 0
/dev/block/mmcblk0p1 /sdcard vfat rw,dirsync,nosuid,nodev,noexec,uid=1000,gid=1000,fmask=0711,dmask=0700,codepage=cp437,iocharset=iso8859-1,utf8 0 0

/dev/block/mtdblock3 is the /system partition device file.

2. Remounting the /system in read-write mode:

# mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system


3. If necessary set read-write permission to any directory under /system. Don’t forget to revert back once you get what you are intended to do.

# chmod 777 /system/fonts

4. Exit the hacker session

# exit

$ exit

Enjoy the freedom of /system.



This entry was posted in HOW-TOs and tagged , , , . Bookmark the permalink.
  • Pingback: How to change fonts in Android? | Black God

  • Pingback: HTC hero CDMA sprint « Sipdroid's Blog

  • Pingback: Looking to disable home/back/search buttons on rooted motorola droid - Droid Forum - Verizon Droid & the Motorola Droid Forum

  • Pingback: Writing to /system/fonts after root - Android Forums

  • Dor

    got my computer to “find” my HTC Desire, but when i type “$ su” it says that “su: permission denied”. how could i get permission?
    thanks!

    • http://www.karuppuswamy.com Black God

      Hi Dor, did you enter your host machine root password when su prompts you?

      • Chanthan

        Dear Black God,

        How can i enter host name machine root password? It don’t prompt me.

        Thanks

        • acid rain

          # su root

          that will give you root on a android device. The device itself must alraedy be patched/rooted.

  • http://www.droid2forum.net Chris Alvorez

    Even as I love a physical keyboard, after handling the Samsung Captivate for roughly quarter-hour, it is hard to go back. Right now I am debating whether or not to go to Verizon for the Droid X, pass to Dash for the EVO, or stay with AT&T for the Captivate…selections, decisions.

  • Pingback: Bricked? - Droid Forum - Verizon Droid & the Motorola Droid Forum

  • Pingback: 修改Android的自带程序:“屏幕锁” - 加上联通标志 – Fan's blog

  • Samuel DH

    WHen i type in C:\android-sdk-windows\tools>adb shell $ su # mount, it says “not recognized as an operable program or file. If i put C:\android-sdk-windows\tools\adb.exe shell $ su # mount, it says $: not found. Help!

    • http://www.karuppuswamy.com Black God

      1. Replace “C:\android-sdk-windows-1.1_r1″ with your SDK installation path if necessary. The following is the command to invoke adb in shell mode.

      C:\android-sdk-windows-1.1_r1\tools>adb shell

      2. Once you get $ prompt, enter su command to get root user shell. You will get # prompt.

      $ su

      3. Now run mount command

      # mount

  • Pingback: [Reship]How to Install Android market on Emulator — Varun « I AM A PROGRAMMER !

  • Noam

    I have a noname android tablet, I follow the steps above, instead of the red line on step 1 I got:
    /dev/block/mtdblock4 /system cramfs ro 0 0
    so I mount with those values, then i tried to chmod the fonts folder, I receive the error message:
    Unable to chmod /system/fonts: Read-only file system
    Why does it failed? Please help

  • Pingback: Mahir B. Aşut Kişisel Sayfaları » Turkcell T10 (Huawei U8110) Android 2.1 Macerası

  • Pingback: Resources for the SYNET7LP/SYTABEX7/Disgo 6000

  • http://www.uurtech.com Ugur KAZDAL

    this is totatlly awesome ! 10x

    but i wanted to ask something,

    when i type n enter “adb push GoogleServicesFramework.apk /system/app” i got the failed msg couse of permission, but i did chmod 777 :S

    the device htc desire btw

    thanks again !

  • Marc Schlaich

    Try this:
    # mount -o remount,rw /system

  • Pingback: Home-Taste sperren - Android-Hilfe.de

  • Peacekeeper72

    where does it get mounted to? its not under My Computer / drive list

  • vineela

    I have a gingerbread android tablet, I follow the steps above, instead of the red line on step 1 I got:
    /dev/block/mtdblock4 /system cramfs ro 0 0
    so I mount with those values, then i tried to chmod the system folder, I receive the error message:
    Unable to chmod /system: Read-only file system
    Why does it failed? Please help me

  • Dasi Rajesh89

    Hi

    Are this commands applicable in the windows OS
    coz I’m facing some problem accessing the permission