Sony Kernel
From Exploitee.rs
Jump to navigationJump to search
A new partition is created at: /dev/sda8
This stores our new /boot (known as sda8 from now on)
On startup, old /boot (sda1 from now on) mounts sda8 and calls "reboot/reboot.sh"
Reboot.sh contains:
/bin/busybox insmod /system/reboot/modules/x86_kexec.ko /bin/busybox insmod /system/reboot/modules/kexec.ko exec /system/reboot/kexec -f /system/reboot/bzImage --command-line="root=/dev/sda8 console=ttyS0,115200"
The first two lines insert our new modules to call kexec. The sony kernel was not built to support kexec, so we had to add it in. The last line calls kexec, and forces it to load our image, "bzImage" from reboot/ on sda8.
Our new kernel is mostly stock, based off the released Sony code [here] (todo: setup code repository), with one modification. It is modified to allow / to be mounted RW.