また、会社のblogにこのような事を書くとお叱りを頂きそうなのですが、
T-Mobile G1 のroot権限の取得手順を調べていたところ面白い方法があることを知りました。
試したところ見事、PCから携帯にroot権限でログインできました。
■用意するもの
・無線LAN環境（G1とPCが一緒に接続できる環境。出来ればDHCPではなく固定IP設定。）
・android market で pTerminal をインストール（pTerminalはroot権限ではなくユーザ権限になります。今回の目的はroot権限のGETです）
■手順
1. まずG1を落とします
2. 普通にG1の電源を入れます
3. ここからがミソで、起動したら出来るだけ早く pTerminal を起動します
4. すぐさま cd /system/bin に移動し telnetd を起動します
5. そして、すぐさま PC から G1 のIPにtelnet します
ちょっと熟練を要すのですが、これだけで id も pass も無しで、root権限でログインが出来てしまいました。(^^
iPhoneと違ってsshじゃないところがちょっと駄目な感じがしますが、ちょっと面白い手順です。
そのうちOS updateで、出来なくなってしまいそうな感もありますが、１1/7現在では問題なく入れるようです。
■T-Mobile G1 のOS環境
root権限でちょっと漁って見た感じを貼り付けます
▼CPU(/proc/cpuinfo)
Processor : ARMv6-compatible processor rev 2 (v6l)
BogoMIPS : 383.38
Features : swp half thumb fastmult edsp java
CPU implementer : 0x41
CPU architecture: 6TEJ
CPU variant : 0x1
CPU part : 0xb36
CPU revision : 2
Cache type : write-back
Cache clean : cp15 c7 ops
Cache lockdown : format C
Cache format : Harvard
I size : 32768
I assoc : 4
I line length : 32
I sets : 256
D size : 32768
D assoc : 4
D line length : 32
D sets : 256
Hardware : trout
Revision : 0080
Serial : 0000000000000000
▼Memory(/proc/meminfo)
MemTotal: 99128 kB
MemFree: 1736 kB
Buffers: 232 kB
Cached: 41688 kB
SwapCached: 0 kB
Active: 72184 kB
Inactive: 12884 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 43172 kB
Mapped: 23556 kB
Slab: 4424 kB
SReclaimable: 976 kB
SUnreclaim: 3448 kB
PageTables: 3936 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
CommitLimit: 49564 kB
Committed_AS: 1289100 kB
VmallocTotal: 155648 kB
VmallocUsed: 58492 kB
VmallocChunk: 70652 kB
▼ディスク構造(df)
/dev: 49564K total, 0K used, 49564K available (block size 4096)
/sqlite_stmt_journals: 4096K total, 0K used, 4096K available (block size 4096)
/system: 69120K total, 64944K used, 4176K available (block size 4096)
/data: 76544K total, 19992K used, 56552K available (block size 4096)
/cache: 69120K total, 1160K used, 67960K available (block size 4096)
/sdcard: 991488K total, 69056K used, 922432K available (block size 16384)
▼プロセス(ps)
USER PID PPID VSIZE RSS WCHAN PC NAME
root 1 0 264 176 c00a5cd0 0000c36c S /init
root 2 0 0 0 c005bd28 00000000 S kthreadd
root 3 2 0 0 c004c12c 00000000 S ksoftirqd/0
root 4 2 0 0 c006e978 00000000 S watchdog/0
root 5 2 0 0 c0058b40 00000000 S events/0
root 6 2 0 0 c0058b40 00000000 S khelper
root 7 2 0 0 c01824d0 00000000 S suspend/0
root 8 2 0 0 c0058b40 00000000 S kblockd/0
root 9 2 0 0 c0058b40 00000000 S kmmcd
root 10 2 0 0 c0058b40 00000000 S btaddconn
root 11 2 0 0 c0058b40 00000000 S btdelconn
root 12 2 0 0 c0058b40 00000000 S qmi
root 13 2 0 0 c003263c 00000000 D rpcrouter
root 14 2 0 0 c0058b40 00000000 S detection/0
root 15 2 0 0 c0032fb4 00000000 S krpcserversd
root 16 2 0 0 c007a964 00000000 S pdflush
root 17 2 0 0 c007a964 00000000 S pdflush
root 18 2 0 0 c007e8b4 00000000 S kswapd0
root 19 2 0 0 c0058b40 00000000 S aio/0
root 20 2 0 0 c0032fb4 00000000 S kadspd
root 21 2 0 0 c0058b40 00000000 S panel_on/0
root 22 2 0 0 c0151ff8 00000000 S mtdblockd
root 23 2 0 0 c0157d84 00000000 S USB mass_storag
root 24 2 0 0 c0058b40 00000000 S synaptics_wq
root 25 2 0 0 c020dfc0 00000000 S krfcommd
root 26 1 724 316 c0049a2c afe0c4cc S /system/bin/sh
system 27 1 796 248 c0189f10 afe0b74c S /system/bin/servicemanager
root 28 1 1828 332 ffffffff afe0b50c S /system/bin/mountd
root 29 1 652 248 c0196e68 afe0c0bc S /system/bin/debuggerd
radio 30 1 7720 940 ffffffff afe0bdbc S /system/bin/rild
root 31 2 0 0 c01751d0 00000000 S mmcqd
root 32 1 66044 19412 c00a62ec afe0b874 S zygote
media 33 1 19344 3420 ffffffff afe0b74c S /system/bin/mediaserver
bluetooth 35 1 1168 732 c00a5cd0 afe0c69c S /system/bin/dbus-daemon
root 37 1 788 288 c01fb090 afe0b50c S /system/bin/installd
compass 39 1 1304 572 c0169014 afe0b74c S /system/bin/akmd
shell 40 1 3320 140 ffffffff 0000e664 S /sbin/adbd
system 53 32 187260 23936 ffffffff afe0b74c S system_server
bluetooth 77 1 728 308 c00a5cd0 afe0c69c S /system/bin/hciattach
root 80 2 0 0 c016da84 00000000 D ksdiorqd
root 81 2 0 0 c0058b40 00000000 S tiwlan_wifi_wq
wifi 84 1 2960 1096 ffffffff afe0b874 S /system/bin/wpa_supplicant
bluetooth 95 1 1448 828 c00a5cd0 afe0c69c S /system/bin/hcid
root 100 1 644 228 c009ef28 afe0b50c S /system/bin/logwrapper
dhcp 101 100 692 360 c00a5cd0 afe0c69c S dhcpcd
radio 109 32 97328 16904 ffffffff afe0c824 S com.android.phone
app_11 114 32 109216 17856 ffffffff afe0c824 S android.process.acore
app_14 140 32 87140 12432 ffffffff afe0c824 S android.process.media
app_11 152 32 90916 12160 ffffffff afe0c824 S com.tmobile.myfaves
app_13 162 32 87052 12244 ffffffff afe0c824 S com.android.mms
app_1 164 32 105728 16984 ffffffff afe0c824 S com.google.process.gapps
root 195 2 0 0 c0032dc8 00000000 D audmgr_rpc
app_26 197 32 118832 13112 ffffffff afe0c824 S src.com.poidio.terminal
app_3 204 32 85768 10108 ffffffff afe0c824 S com.android.voicedialer
app_25 213 32 89756 12216 ffffffff afe0c824 S android.process.im
app_19 225 32 90024 12884 ffffffff afe0c824 S com.android.calendar
app_23 237 32 86008 11220 ffffffff afe0c824 S com.android.alarmclock
app_17 251 32 88500 12232 ffffffff afe0c824 S com.google.android.gm
root 266 26 664 276 c00a5cd0 afe0c69c S telnetd
root 269 266 724 324 c0127394 afe0b50c S /system/bin/sh
root 278 266 724 324 c0049a2c afe0c4cc S /system/bin/sh
root 291 278 868 328 00000000 afe0b50c R ps
▼bootlog(dmesg)
<5>[ 0.000000] Linux version 2.6.25-01843-gfea26b0 (android-build@apa27.mtv.corp.google.com) (gcc version 4.2.1) #6 PREEMPT Mon Oct 6 14:13:36 PDT 2008
<4>[ 0.000000] CPU: ARMv6-compatible processor [4117b362] revision 2 (ARMv6TEJ), cr=00c5387f
<4>[ 0.000000] Machine: trout
<6>[ 0.000000] AKM Data size = 1018 , 0x89768976, size = 4064
<4>[ 0.000000] Memory policy: ECC disabled, Data cache writeback
<7>[ 0.000000] On node 0 totalpages: 25856
<7>[ 0.000000] DMA zone: 202 pages used for memmap
<7>[ 0.000000] DMA zone: 0 pages reserved
<7>[ 0.000000] DMA zone: 25654 pages, LIFO batch:7
<7>[ 0.000000] Normal zone: 0 pages used for memmap
<7>[ 0.000000] Movable zone: 0 pages used for memmap
<4>[ 0.000000] trout_init_map_io()
<6>[ 0.000000] clock_init()
<6>[ 0.000000] ACPU running at 384000 KHz
<4>[ 0.000000] WARNING - Bad VDD (0 != 3) for this freq
<4>[ 0.000000] CPU0: D VIPT write-back cache
<4>[ 0.000000] CPU0: I cache: 32768 bytes, associativity 4, 32 byte lines, 256 sets
<4>[ 0.000000] CPU0: D cache: 32768 bytes, associativity 4, 32 byte lines, 256 sets
<4>[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 25654
<5>[ 0.000000] Kernel command line: board_trout.disable_uart3=0 board_trout.usb_h2w_sw=0 board_trout.disable_sdcard=0 board_trout.smisize=64 androidboot.baseband=1.22.12.29 androidboot.bootloader=0.95.0000 androidboot.carrier=TMUS board_trout.keycaps=qwerty androidboot.mode=normal androidboot.serialno=HT839GZ06734 no_console_suspend=1
<3>[ 0.000000] Unknown boot option `board_trout.smisize=64': ignoring
<3>[ 0.000000] Unknown boot option `androidboot.baseband=1.22.12.29': ignoring
<3>[ 0.000000] Unknown boot option `androidboot.bootloader=0.95.0000': ignoring
<3>[ 0.000000] Unknown boot option `androidboot.carrier=TMUS': ignoring
<3>[ 0.000000] Unknown boot option `androidboot.mode=normal': ignoring
<4>[ 0.000000] trout_init_irq()
<4>[ 0.000000] PID hash table entries: 512 (order: 9, 2048 bytes)
<4>[ 0.000000] Console: colour dummy device 80x30
<6>[ 0.000000] console [tty0] enabled
<6>[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
<6>[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
<6>[ 0.010000] Memory: 101MB = 101MB total
<5>[ 0.010000] Memory: 98744KB available (2552K code, 759K data, 100K init)
<7>[ 0.010000] Calibrating delay loop... 383.38 BogoMIPS (lpj=1916928)
<4>[ 0.230000] Mount-cache hash table entries: 512
<6>[ 0.230000] CPU: Testing write buffer coherency: ok
<6>[ 0.230000] net_namespace: 440 bytes
<6>[ 0.230000] NET: Registered protocol family 16
<4>[ 0.230000] trout_init() revision=128
<4>[ 0.240000] trout_init: cpld_usb_hw2_sw = 0
<3>[ 0.240000] trout_gpio_irq_handler: got masked interrupt: 0:80
<6>[ 0.340000] msm_i2c_probe
<6>[ 0.340000] msm_i2c_probe: clk_ctl 35d, 100000 Hz
<6>[ 0.380000] Bluetooth: Core ver 2.11
<6>[ 0.380000] NET: Registered protocol family 31
<6>[ 0.380000] Bluetooth: HCI device and connection manager initialized
<6>[ 0.380000] Bluetooth: HCI socket layer initialized
<6>[ 0.380000] NET: Registered protocol family 2
<7>[ 0.390091] Switched to high resolution mode on CPU 0
<6>[ 0.470701] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
<6>[ 0.472868] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
<6>[ 0.473326] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
<6>[ 0.473540] TCP: Hash tables configured (established 4096 bind 4096)
<6>[ 0.473601] TCP reno registered
<6>[ 0.501525] Unpacking initramfs... done
<6>[ 0.556042] Freeing initrd memory: 138K
<6>[ 0.558697] Registered led device: lcd-backlight
<6>[ 0.559429] smd_init()
<6>[ 0.559490] smd_core_init()
<6>[ 0.559735] smd_alloc_channel() 'SMD_RPCCALL' cid=2, shared=e010d9a0
<6>[ 0.560274] smd_alloc_channel() 'SMD_DATA5' cid=11, shared=e0119a18
<6>[ 0.560610] smd_alloc_channel() 'SMD_DATA6' cid=12, shared=e011da40
<6>[ 0.560915] smd_alloc_channel() 'SMD_DATA7' cid=13, shared=e0121a68
<6>[ 0.561190] smd_alloc_channel() 'SMD_DATA11' cid=17, shared=e01119c8
<6>[ 0.561495] smd_alloc_channel() 'SMD_CS_A2M' cid=33, shared=e01159f0
<6>[ 0.561800] smd_alloc_channel() 'SMD_DATA5_CNTL' cid=38, shared=e0125a90
<6>[ 0.562136] smd_alloc_channel() 'SMD_DATA6_CNTL' cid=39, shared=e0129ab8
<6>[ 0.562410] smd_alloc_channel() 'SMD_DATA7_CNTL' cid=40, shared=e012dae0
<6>[ 0.562746] smd_core_init() done
<4>[ 0.565218] SMD: ch 2 OPENING -> OPENED
<6>[ 0.566683] hw3d: 0 init
<6>[ 0.567202] msm_perf_init():
<6>[ 0.568880] H2W: Registering H2W (headset) driver
<6>[ 0.571525] input: h2w headset as /class/input/input0
<6>[ 0.583662] RPC_TIME_TOD_SET_APPS_BASES:
<4>[ 0.583692] tick = 334840
<4>[ 0.583692] stamp = 452987078
<6>[ 0.588361] ashmem: initialized
<4>[ 0.590091] yaffs Oct 6 2008 14:13:20 Installing.
<6>[ 0.590305] io scheduler noop registered
<6>[ 0.590396] io scheduler anticipatory registered (default)
<6>[ 0.591068] mddi_pmdh: init() base=0xe000b000 irq=16
<6>[ 0.596835] get_smem_clock: state 10429 clock 0
<6>[ 0.630274] mddi cmd send rtd: int 3a000, stat 8063, rtd val d
<6>[ 0.650762] mddi_pmdh: publish: mddi_c_d263_0000
<6>[ 0.652594] vsync on gpio 97 now 0
<6>[ 0.652716] mddi_pmdh: mddi_add_panel(c02eef78, c02b3a50)
<6>[ 0.652777] mddi_pmdh: publish: mddi_panel
<6>[ 0.653265] msmfb_probe() installing 320 x 480 panel
<6>[ 0.691037] msm_serial: detected port #0
<6>[ 0.691342] msm_serial.0: ttyMSM0 at MMIO 0xa9a00000 (irq = 9) is a MSM
<6>[ 0.692258] msm_serial: driver initialized
<6>[ 0.694272] loop: module loaded
<6>[ 0.694425] PPP generic driver version 2.4.2
<6>[ 0.694730] PPP Deflate Compression module registered
<6>[ 0.694791] PPP BSD Compression module registered
<4>[ 0.704699] allocated dma buffer at ffc01000, dma_addr 16130000
<4>[ 0.704943] read CFG0 = aad400c0, CFG1 = 4745c
<4>[ 0.705035] CFG0 = e8d408c0, CFG1 = 4745c
<6>[ 0.705096] CFG0: cw/page=3 ud_sz=516 ecc_sz=10 spare_sz=1 num_addr_cycles=5
<4>[ 0.705218] NAND_READ_ID = 1500aaec
<4>[ 0.705371] status: c03120
<4>[ 0.705432] nandid: 1500aaec maker ec device aa
<4>[ 0.705523] CFG0: cw/page=3 ud_sz=512 ecc_sz=10 spare_sz=5
<4>[ 0.705615] DEV_CMD1: f00f3000
<6>[ 0.705676] NAND_EBI2_ECC_BUF_CFG: 1ff
<4>[ 0.705737] flash_id: 1500aaec size 10000000
<5>[ 0.705798] Creating 6 MTD partitions on "msm_nand":
<5>[ 0.705889] 0x024c0000-0x02500000 : "misc"
<5>[ 0.706866] 0x026c0000-0x02bc0000 : "recovery"
<5>[ 0.707720] 0x02bc0000-0x02e40000 : "boot"
<5>[ 0.708544] 0x02e40000-0x071c0000 : "system"
<5>[ 0.709429] 0x071c0000-0x0b540000 : "cache"
<5>[ 0.710579] 0x0b540000-0x10000000 : "userdata"
<6>[ 0.712136] usb_probe() io=c6806000, irq=47, dma=ffc02000(1613a000)
<6>[ 0.713021] usb_function_register() 'adb'
<6>[ 0.713448] usb_function_register() 'usb_mass_storage'
<6>[ 0.713540] msm_hsusb: functions bound. starting.
<6>[ 0.713601] usb_bind_func() 'usb_mass_storage'
<6>[ 0.714119] usb_mass_storage usb_mass_storage: Number of LUNs=1
<6>[ 0.714241] usb_bind_func() 'adb'
<6>[ 0.714303] adb_bind() c612c874, c612ca34
<6>[ 0.714455] adb_bind() allocated 4 rx and 4 tx requests
<6>[ 0.715249] usb_function_register() 'diag'
<6>[ 0.715798] mice: PS/2 mouse device common for all mice
<6>[ 0.715981] hsusb: IDLE -> ONLINE
<6>[ 0.716134] hsusb: reset controller
<4>[ 0.760091] ulpi: write 0x40 to 0x31
<4>[ 0.760213] ulpi: write 0x1d to 0x0d
<4>[ 0.760274] ulpi: write 0x1d to 0x10
<6>[ 0.760305] ept #0 out max:64 head:ffc02000 bit:0
<6>[ 0.760396] ept #1 out max:512 head:ffc02080 bit:1
<6>[ 0.760457] ept #2 out max:512 head:ffc02100 bit:2
<6>[ 0.760518] ept #0 in max:64 head:ffc02040 bit:16
<6>[ 0.760579] ept #1 in max:512 head:ffc020c0 bit:17
<6>[ 0.760640] ept #2 in max:512 head:ffc02140 bit:18
<6>[ 0.760824] usb: notify offline
<6>[ 0.760915] hsusb: ONLINE -> OFFLINE
<3>[ 0.770640] msm_i2c msm_i2c.0: Error during data xfer (-5)
<6>[ 0.781495] synaptics_ts_probe: Product Major Version 1
<6>[ 0.782929] synaptics_ts_probe: Product Minor Version c
<6>[ 0.784303] synaptics_ts_probe: product property 2
<6>[ 0.785706] synaptics_ts_probe: device control 81
<6>[ 0.787080] synaptics_ts_probe: interrupt enable 3
<6>[ 0.790000] synaptics_ts_probe: 0xe0: 1 1 1 2 1 c 0 0
<6>[ 0.790000] synaptics_ts_probe: max_x 3480, max_y 5368
<6>[ 0.790000] synaptics_ts_probe: inactive_x -80 -80, inactive_y -32 -32
<6>[ 0.790000] synaptics_ts_probe: snap_x 240-248 240-248, snap_y 80-88 80-88
<6>[ 0.790000] input: synaptics-rmi-touchscreen as /class/input/input1
<6>[ 0.840854] synaptics_ts_probe: Start touchscreen synaptics-rmi-touchscreen in interrupt mode
<6>[ 0.841251] GPIO Event Driver
<6>[ 0.841922] GPIO Keypad Driver: Start keypad matrix for trout-keypad-v3 in interrupt mode
<4>[ 0.842319] No IRQF_TRIGGER set_type function for IRQ 191 (troutgpio)
<4>[ 0.842472] No IRQF_TRIGGER set_type function for IRQ 192 (troutgpio)
<6>[ 0.842685] GPIO Input Driver: Start gpio inputs for trout-keypad-v3 in interrupt mode
<4>[ 0.842807] No IRQF_TRIGGER set_type function for IRQ 188 (troutgpio)
<6>[ 0.842929] GPIO Input Driver: Start gpio inputs for trout-keypad-v3 in interrupt mode
<6>[ 0.843875] input: trout-keypad-v3 as /class/input/input2
<6>[ 0.892929] smd_alloc_channel() 'SMD_GPSNMEA' cid=27, shared=e0131b10
<4>[ 0.901007] No IRQF_TRIGGER set_type function for IRQ 186 (troutgpio)
<6>[ 0.901220] GPIO Input Driver: Start gpio inputs for trout-nav in interrupt mode
<6>[ 0.901953] input: trout-nav as /class/input/input3
<6>[ 0.961098] rs30000048:0da5b528 rs30000048:0da5b528: rtc core: registered msm_rtc as rtc0
<6>[ 0.964852] Registered led device: blue
<6>[ 0.965188] Registered led device: green
<6>[ 0.965462] Registered led device: red
<6>[ 0.965737] AKM8976A compass driver: init
<4>[ 0.965889] No IRQF_TRIGGER set_type function for IRQ 187 (troutgpio)
<6>[ 0.966683] input: compass as /class/input/input4
<6>[ 0.991220] pdev->dev.platform_data is not NULL
<6>[ 0.991403] mt9t013: probe
<6>[ 0.991464] mt9t013: init
<6>[ 0.991525] mt9t013: mt9t013_register_init
<6>[ 0.991587] mt9t013: camera sensor_reset set as 1
<6>[ 0.993662] mt9t013: clk_get(vfe_mdc_clk): c02a4cd4
<6>[ 0.993784] mt9t013: clk_get(mdc_clk): c02a4954
<6>[ 0.993875] mt9t013: clk select 1
<6>[ 0.993936] mt9t013: clk_get(vfe_clk): c02a4cb4
<6>[ 0.994058] mt9t013: enable vfe_clk
<6>[ 1.020061] mt9t013: clk select 0
<6>[ 1.028697] mt9t013: camera sensor init sequence done
<6>[ 1.028758] mt9t013: camera sensor suspend sequence
<6>[ 1.028880] mt9t013: disabling vfe_clk
<6>[ 1.028972] mt9t013: clk_put(vfe_clk): c02a4cb4
<6>[ 1.029277] mt9t013: camera sensor suspend sequence done
<6>[ 1.030122] Bluetooth: HCI UART driver ver 2.2
<6>[ 1.030213] Bluetooth: HCI H4 protocol initialized
<6>[ 1.030274] Bluetooth: HCILL protocol initialized
<6>[ 1.031464] mmc0: Qualcomm MSM SDCC at 0x00000000e1000000 irq 24,0 dma -1
<6>[ 1.031587] mmc0: 4 bit data mode enabled
<6>[ 1.031648] mmc0: MMC clock 144000 -> 20000000 Hz, PCLK 64000000 Hz
<6>[ 1.031739] mmc0: Slot eject status = 1
<6>[ 1.031770] mmc0: Power save feature enable = 0
<6>[ 1.031831] mmc0: PIO transfer enabled
<6>[ 1.032929] mmc1: Qualcomm MSM SDCC at 0x00000000e1001000 irq 26,194 dma 8
<6>[ 1.033051] mmc1: 4 bit data mode enabled
<6>[ 1.033143] mmc1: MMC clock 144000 -> 20000000 Hz, PCLK 64000000 Hz
<6>[ 1.033204] mmc1: Slot eject status = 0
<6>[ 1.033265] mmc1: Power save feature enable = 0
<6>[ 1.033326] mmc1: DM non-cached buffer at ffc04000, dma_addr 0x1615b000
<6>[ 1.033387] mmc1: DM cmd busaddr 370520064, cmdptr busaddr 370520832
<6>[ 1.034181] Registered led device: spotlight
<6>[ 1.034516] Registered led device: keyboard-backlight
<6>[ 1.034852] Registered led device: button-backlight
<4>[ 1.035493] No IRQF_TRIGGER set_type function for IRQ 190 (troutgpio)
<6>[ 1.036103] ram_console: got buffer at 16d00000, size 20000
<6>[ 1.036500] ram_console: found existing buffer, size 76720, start 76720
<6>[ 1.190518] smd_alloc_channel() 'SMD_DS' cid=0, shared=e0135b38
<6>[ 1.191251] smd_alloc_channel() 'SMD_DATA1' cid=7, shared=e0139b60
<6>[ 1.191922] smd_alloc_channel() 'SMD_DATA2' cid=8, shared=e013db88
<6>[ 1.192411] smd_alloc_channel() 'SMD_DATA3' cid=9, shared=e0141bb0
<6>[ 1.192899] smd_alloc_channel() 'SMD_DATA4' cid=10, shared=e0145bd8
<6>[ 1.499796] console [ram-1] enabled
<6>[ 1.501434] logger: created 64K log 'log_main'
<6>[ 1.501983] logger: created 256K log 'log_events'
<6>[ 1.502472] logger: created 64K log 'log_radio'
<6>[ 1.504333] pmem: 1 init
<6>[ 1.505371] pmem_adsp: 0 init
<6>[ 1.510610] pmem_gpu0: 0 init
<6>[ 1.512227] pmem_gpu1: 0 init
<6>[ 1.513692] pmem_camera: 0 init
<4>[ 1.515554] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
<6>[ 1.523906] ip_tables: (C) 2000-2006 Netfilter Core Team
<6>[ 1.524547] TCP cubic registered
<6>[ 1.525066] NET: Registered protocol family 1
<6>[ 1.525828] NET: Registered protocol family 17
<6>[ 1.526225] Bluetooth: L2CAP ver 2.9
<6>[ 1.526561] Bluetooth: L2CAP socket layer initialized
<6>[ 1.527141] Bluetooth: SCO (Voice Link) ver 0.6
<6>[ 1.527476] Bluetooth: SCO socket layer initialized
<6>[ 1.528453] Bluetooth: RFCOMM socket layer initialized
<6>[ 1.528880] Bluetooth: RFCOMM TTY layer initialized
<6>[ 1.529460] Bluetooth: RFCOMM ver 1.9
<6>[ 1.530457] clock_late_init() disabled 20 unused clocks
<6>[ 1.534089] rs30000048:0da5b528 rs30000048:0da5b528: setting system clock to 2008-11-06 15:19:51 UTC (1225984791)
<6>[ 1.534974] Freeing init memory: 100K
<3>[ 1.744791] init: cannot open '/initlogo.rle'
<6>[ 1.751251] yaffs: dev is 32505859 name is "mtdblock3"
<6>[ 1.751678] yaffs: passed flags ""
<4>[ 1.751983] yaffs: Attempting MTD mount on 31.3, "mtdblock3"
<4>[ 1.781222] yaffs: restored from checkpoint
<4>[ 1.781924] yaffs_read_super: isCheckpointed 1
<6>[ 1.784182] yaffs: dev is 32505861 name is "mtdblock5"
<6>[ 1.784854] yaffs: passed flags ""
<4>[ 1.785189] yaffs: Attempting MTD mount on 31.5, "mtdblock5"
<4>[ 1.911863] yaffs: restored from checkpoint
<4>[ 1.912595] yaffs_read_super: isCheckpointed 1
<6>[ 1.919096] yaffs: dev is 32505860 name is "mtdblock4"
<6>[ 1.919767] yaffs: passed flags ""
<4>[ 1.920154] yaffs: Attempting MTD mount on 31.4, "mtdblock4"
<4>[ 1.924762] yaffs: restored from checkpoint
<4>[ 1.925495] yaffs_read_super: isCheckpointed 1
<4>[ 1.970093] mmc_sd_init_card: Delay 250 ms
<4>[ 2.335525] mmc1: host does not support reading read-only switch. assuming write-enable.
<6>[ 2.336288] mmc1: new SD card at address deeb
<6>[ 2.338058] mmcblk0: mmc1:deeb SU01G 992000KiB
<6>[ 2.338882] mmcblk0: p1
<6>[ 2.586258] enabling adb function
<3>[ 2.594335] FAT: bogus number of reserved sectors
<6>[ 2.595068] VFS: Can't find a valid FAT filesystem on dev mmcblk0.
<6>[ 2.689828] warning: `rild' uses 32-bit capabilities (legacy support in use)
<4>[ 3.041865] SMD: ch 0 OPENING -> OPENED
<6>[ 3.042597] qmi: smd closed
<4>[ 3.043208] SMD: ch 38 OPENING -> OPENED
<6>[ 3.043543] qmi: smd opened
<6>[ 3.044581] qmi: smd closed
<4>[ 3.045008] SMD: ch 39 OPENING -> OPENED
<6>[ 3.045558] qmi: smd opened
<6>[ 3.046168] qmi: ctl: wds use client_id 0x01
<6>[ 3.046565] qmi: ctl: wds use client_id 0x01
<6>[ 3.047358] qmi: smd closed
<4>[ 3.047724] SMD: ch 40 OPENING -> OPENED
<6>[ 3.048060] qmi: smd opened
<6>[ 3.049800] qmi: ctl: wds use client_id 0x01
<4>[ 12.681338] init sharp panel
<6>[ 17.757409] android_power: wakeup (0->0) at 25547348632 (2008-11-06 15:20:15.213256836 UTC)
<6>[ 18.705761] TIWLAN: Driver loading
<4>[ 18.706280] trout_wifi_power: 1
<4>[ 18.934906] trout_wifi_reset: 0
<4>[ 18.993686] trout_wifi_set_carddetect: 1
<7>[ 18.994113] mmc0: card_present 1
<6>[ 18.994510] mmc0: Slot status change detected (0 -> 1)
<4>[ 19.010481] mmc0: card claims to support voltages below the defined range. These will be ignored.
<4>[ 19.011183] mmc0: SDIO card claims to support the incompletely defined 'low voltage range'. This will be ignored.
<6>[ 19.014723] mmc0: new SDIO card at address 0001
<6>[ 19.018690] TIWLAN: Found SDIO controller (vendor 0x104c, device 0x9066)
<6>[ 19.028782] TIWLAN: Driver initialized (rc 0)
<6>[ 19.029240] TIWLAN: Driver loaded
<6>[ 31.041398] audmgr_rpc_thread() start
<6>[ 31.042771] audio_enable()
<6>[ 31.043168] ++++++++++++++++++++++++++++++
▼その他
・cronやatはない（iPhoneにはあるらしい。ちょっと残念。）
・sshd もない（iPhoneにはあるらしい。とても残念。）
・viもない
・/system/bin の下にコマンド類がある(/bin や /usr/binではない）。以下/system/binのls結果
df
rmdir
dmesg
renice
dumpcrash
rm
reboot
printenv
dd
ps
date
notify
cmp
netstat
chmod
mv
cat
mount
wipe
mkdosfs
watchprops
wpa_supplicant
wpa_cli
mkdir
wlan_loader
toolbox
telnetd
system_server
svc
surfaceflinger
vmstat
ssltest
sh
servicemanager
service
lsmod
sdutil
sdptool
rild
radiooptions
qemud
pm
umount
playmp3
ping
netcfg
mountd
ls
monkey
mediaserver
logwrapper
logcat
linker
itr
top
installd
input
htclogkernel
hostapd_cli
log
hostapd
hcid
hciattach
flash_image
fillup
dvz
sync
dumpsys
dumpstate
dhcpcd
dexopt
ln
debuggerd
debug_tool
dbus-daemon
dalvikvm
app_process
am
stop
akmd
kill
start
ioctl
smd
insmod
sleep
iftop
setprop
ifconfig
setconsole
id
sendevent
hd
schedtop
getprop
route
getevent
rmmod
色々、突っ込みどころ満載といった感じで、もっと遊びたいのですが、時間がなくここまで。
明日は、仙台の携帯勉強会に出席です。