I have no responsibility whatsoever if this guideline causes any harm to your device. The intention of these posts are solely as personal notes for myself. Follow them at your own risk.<\/p>\n\n\n\n
Through these steps I will unlock the phone’s bootloader, erasing all data. This includes the DRM keys stored in the Trim Area (TA) partition. I’ll attempt backing them up but, as of today, there is no way of restoring them to the previous state nor knowing if the actual backup is usable at all.<\/p>\n\n\n\n
Without these DRM keys, several audio and video proprietary functionality provided by Sony won’t be available<\/a> including some camera post-processing features<\/strong>, color gamut profiles, white balance, noise reduction, X-Reality Video Enhancement, DSEE HX, ClearAudio+, and Widevine L1 support for HD Netflix.<\/p>\n\n\n\n As explained in the previous post<\/a>, enable developer mode in the phone.<\/p>\n\n\n\n Following this guide<\/a>, download<\/a> the latest Magisk release. At the time of writing this it’s v20.4.<\/p>\n\n\n\n Download the tama-mroot.zip<\/a> with the needed exploit.<\/p>\n\n\n\n Push both archives into the phone (you may need to give consent in a pop up dialog in the phone):<\/p>\n\n\n\n Get into the phone and follow the steps to get a root shell:<\/p>\n\n\n\n We can verify now that we have really root<\/em> privileges:<\/p>\n\n\n\n Hence, let’s go ahead and back up the TA partition:<\/p>\n\n\n\n Now, from another terminal in the computer, pull the created backup:<\/p>\n\n\n\n That’s it, we have finished backing up the TA partition!<\/p>\n\n\n\n Now, we can continue to install the LineageOS system<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" WARNING I have no responsibility whatsoever if this guideline causes any harm to your device. The intention of these posts are solely as personal notes for myself. Follow them at your own risk. WARNING Through these steps I will unlock … Sigue leyendo Backup the TA partition<\/h2>\n\n\n\n
root$ adb push tama-mroot\/tama-mroot.zip Magisk\/Magisk-v20.4.zip \/data\/local\/tmp\ntama-mroot\/tama-mroot.zip: 1 file pushed. 0.5 MB\/s (21355 bytes in 0.039s)\nMagisk\/Magisk-v20.4.zip: 1 file pushed. 32.0 MB\/s (5942417 bytes in 0.177s)\n2 files pushed. 25.4 MB\/s (5963772 bytes in 0.224s)<\/pre>\n\n\n\n
root$ adb shell\nH8324:\/ $ cd \/data\/local\/tmp\nH8324:\/data\/local\/tmp $ unzip tama-mroot.zip\nArchive: tama-mroot.zip\ninflating: magisk-start.sh\ninflating: magisk-setup.sh\ninflating: tama-mroot\nH8324:\/data\/local\/tmp $ chmod 755 tama-mroot magisk-setup.sh magisk-start.sh\nH8324:\/data\/local\/tmp $ .\/magisk-setup.sh\n\n[...]\n\nH8324:\/data\/local\/tmp $ cd \/data\/local\/tmp\nH8324:\/data\/local\/tmp $ .\/tama-mroot\n\n[...]\n\nroot_by_cve-2020-0041:\/data\/local\/tmp # .\/magisk-start.sh -1\n\n[...]\n\nroot_by_cve-2020-0041:\/data\/local\/tmp # .\/magisk-start.sh -2\n\n[...]\n\nroot_by_cve-2020-0041:\/data\/local\/tmp # .\/magisk-start.sh -3\n\n[...]<\/pre>\n\n\n\n
root_by_cve-2020-0041:\/data\/local\/tmp # id\nuid=0(root) gid=0(root) groups=0(root),1004(input),1007(log),1011(adb),1015(sdcard_rw),1028(sdcard_r),3001(net_bt_admin),3002(net_bt),3003(inet),3006(net_bw_stats),3009(readproc),3011(uhid) context=u:r:magisk:s0\nroot_by_cve-2020-0041:\/data\/local\/tmp # uname -a\nLinux localhost 4.9.186-perf+ #1 SMP PREEMPT Fri Jan 17 01:22:05 2020 aarch64<\/pre>\n\n\n\n
root_by_cve-2020-0041:\/data\/local\/tmp # dd if=\/dev\/block\/bootdevice\/by-name\/TA of=TA-locked.img\n4096+0 records in\n4096+0 records out\n2097152 bytes (2.0 M) copied, 0.039839 s, 50 M\/s\nroot_by_cve-2020-0041:\/data\/local\/tmp # chown shell:shell TA-locked.img\nroot_by_cve-2020-0041:\/data\/local\/tmp # sync\nroot_by_cve-2020-0041:\/data\/local\/tmp # sync<\/pre>\n\n\n\n
root$ adb pull \/data\/local\/tmp\/TA-locked.img<\/pre>\n\n\n\n