Granting root access to adb shell only?

richard31076

Novalissoide I see. Still, there is a couple of elevated commands I need to run. Is there a way to do this if I'm willing to take the risk?

Novalissoide

richard31076 Settings > Network & Internet > Internet > 'cogwheel icon' > Carrier settings overrides

You'll see something that might solve your previous Adb-incentive here. 😉

richard31076

Novalissoide You are kind of right in what I'm trying to do(setting up local carrier settings), but I'm afraid those are not enough in my case. So I need to tweak some more settings. That's why I want the rooted adb shell. Are there any other ways?

Novalissoide

richard31076 What are you trying to achieve with the command?

Novalissoide

richard31076 setting up local carrier settings

The tinker-space for this is rather large already in Graphene

monogram

richard31076 That's why I want the rooted adb shell. Are there any other ways?

You'd need to compile an userdebug GOS build to get rooted ADB.

richard31076

Novalissoide What I'm trying to achieve is to enable the call functionality of my pixel. The method is linked here: https://techtree.tistory.com/239 . You can run a translator if you want, but you'll be able to see the commands if you scroll down. I know those are safe because I used to run them just fine on the stock os before.
edit: if you don't want to press the link, here's some of the code:

echo -e 'AT+GOOGSETNV="UL3.Cap.Phych.supp_of_fdpch",0,"01,00,00,00"\r AT+GOOGSETNV="UL3.Cap.Phych.supp_of_Efdpch",0,"01,00,00,00"\r AT+GOOGSETNV="UL3.Cap.Phych.supp_ul_dtx",0,"00"\r AT+GOOGSETNV="UL3.Cap.Phych.slotFormat4",0,"00,00,00,00"\r AT+GOOGSETNV="UL3.Cap.Multi.supp_IRAT PS HO to E-UTRA",0,"01"\r AT+GOOGSETNV="UL3.Cap.MultiCellSupport_DC_HSDPA",0,"01"\r AT+GOOGSETNV="UL3.Etc.FastDormancyT323Rel8Support",0,"01,00,00,00"\r AT+CFUN=0\rAT+CFUN=1\r' > /dev/umts_router & cat /dev/umts_router

richard31076

Novalissoide I know the overrides Graphene provides, but they are just not enough for my use case. My carrier just doens't seem to like pixels.

richard31076

monogram Do I need to change anything in the repo before I build (other than the server address)? Like the ro.adb.secure mentioned in the HN thread?

dawt

richard31076

You actually don't need to change the server address unless you're doing an official build, and even then it's more straightforward to disable the updater app entirely by commenting out this: https://github.com/GrapheneOS/platform_build/blob/b24bd3812cc4fe4b09c2251068406251d53c4f8c/target/product/media_system.mk#L39-L41

Like the ro.adb.secure mentioned in the HN thread?

That should get set when you choose userdebug in the lunch command during build.

MetropleX

richard31076

As a warning to others, it is not advised to use USB Debugging or ADB on a production device:

ADB exposes an enormous amount of attack surface.
If you have ADB access, you can enable perf events, but there's a lot more attack surface via ADB than that and it's as close as it gets to having root access without an exploit.
ADB has near full control of the device, but isn't meant to actually have root access on a production build. It can be used to do everything you can do via the UI but also far more which expose a lot of attack surface.
ADB isn't advisable on a production device either way.

We don't support it.