Rooting the Tesco Hudl
I have an original Tesco Hudl - a Rockchip RK3188 based Android tablet. It’s somewhat long in the tooth and mine is running Android 4.2.2 (Jelly Bean). As a first step in trying to get it updated a bit I decided to root it and have a poke about. There are plenty of guides for this, but they mostly involve downloading Android apps that look dodgy or don’t exist any more. Thankfully the bootloader is unlocked, so I did it the hard (manual) way from a Debian 10 (Buster) box. I doubt this is useful to many folk, but I thought I’d write it up. As you’d expect follow this at your own risk; there is the potential to brick the Hudl.
First, enable developer mode on the Hudl (so we can adb in). Open the Settings app, scroll down to the bottom and click “About Tablet”, scroll down to the bottom and tap “Build number” 7 times, at which point it will tell you “You are now a developer!”. Go back to the main settings menu and just above “About Tablet” there will now be a “Developer options” entry. Click it, then make sure the box beside “USB debugging” is ticked.
Now you need to install the appropriate tools on your Debian box. That should be:
$ sudo apt install adb rkflashtool
We also need to download a suitable
su tool. I lazily went for the prebuilt SuperSU Root:
$ mkdir hudl-root $ cd hudl-root $ wget https://supersuroot.org/downloads/SuperSU-v2.79-201612051815.zip $ unzip SuperSU-v2.79-201612051815.zip
2.82 is the latest version but has problems on Jelly Bean; the device will end up not properly booting.
Hook the Hudl up to your machine with a suitable USB cable and you’ll now be able to get a shell on it:
$ adb shell * daemon not running; starting now at tcp:5037 * daemon started successfully shell@android:/ $
Ctrl-D will quit the shell and return you back to the local prompt. Next step is to reboot into the Rockchip bootloader, and use that to download the system partition (just over 1G in size)
$ adb reboot bootloader $ sudo rkflashtool r system > system.img rkflashtool: info: rkflashtool v5.2 rkflashtool: info: Detected RK3188... rkflashtool: info: interface claimed rkflashtool: info: working with partition: system rkflashtool: info: found offset: 0x00142000 rkflashtool: info: found size: 0x00200000 rkflashtool: info: reading flash memory at offset 0x00341fe0... Done!
We now have a
system.img file which represents the system partition of the device. We can mount that and copy over the
su binary and SuperSU apk.
$ sudo mount -o loop system.img /mnt $ sudo cp common/Superuser.apk /mnt/app/ $ sudo cp armv7/su /mnt/xbin/ $ sudo chmod +sx /mnt/xbin/su $ sudo umount /mnt
Finally we can write this image back to the device, reboot and once the reboot has completed use
adb to connect and
su to root. SuperSU might pop up a dialog on the tablet asking you to ok the action (and possibly indicate it needs to do a fixup of the installation):
$ sudo rkflashtool w system < system.img $ sudo rkflashtool b $ adb shell shell@android:/ $ su - root@android:/ #