mod_nvram has also been pre-installed, which will allow you to unlock (mod_nvram -u) the device from your carrier and perform a downgrade (mod_nvram -d).
A backup of the NVRAM is created in the “downloads” folder every time the device is booted.
Fixed an issue with APK installation during the first boot.
Links to pre-built firmware were removed due to complaints from some users about instability.
Since no one has yet managed to turn my work into a finished solution, I’ll do it myself. This is a collection of firmwares with pre-installed root access.
Caution
Use at your own risk; I am not liable for any damages (direct or indirect) resulting from your use of these modified versions.
Flash device using the appropriate autoloader, wait for it to boot up and for the message “The device has been successfully rooted!” to appear, and then you're good to go.
In most cases, root survives a device reboot, but I don't have enough evidence to confirm this.
The SSH key is pre-installed; to access via SSH, use this private key. You can replace it with own by editing the file /var/etc/ssh/authorized_keys2 on device.
The following apps have been removed from the firmware:
com.evernote
com.linkedin
com.rim.bb.app.facebook
com.rim.bb.app.retaildemoshim
com.tcs.maps
com.twitter
sys.appworld
sys.cfs.box
sys.cfs.dropbox
sys.mmagic
sys.retaildemo
sys.socialconnect.facebook
sys.socialconnect.linkedin
sys.socialconnect.twitter
sys.socialconnect.youtube
sys.uri.youtube
Warning
Please wait about 5 minutes after the system has booted before install unsigned programs
Warning
It has been reported that after the first launch, you won't be able to install APKs. Restarting your phone resolves this issue. Before restarting your phone, be sure to wait for the notification that root access has been granted.
The autostart manager now runs any scripts or programs added to /var/etc/autostart.conf, /accounts/devuser/autostart.conf, and /accounts/1000/autostart.conf.
If a script is added multiple times or to multiple files, it is executed only once.
Execution logs stored in /tmp/logs/
I’ve also added features to ensure impersonation and root recovery without having to reinstall the system.
Background: The Passport detected the SIM card and networks, but wouldn't register with any of them. Trying to force it to register, I copied the modem’s service records from my work phone. After a while, the test phone started acting even worse. So I decided to restore the previous settings (since I’m experienced, I make backups :-) ) Some of the entries from the backup refused to write. So I decided to just delete _/efs/modemfs1 and _/efs/modemfs2 (I’d done this before and everything seemed fine; after a reboot, they were recreated) That might have happened this time if I hadn't run qcnv with the -e (erase all) and -i (initialize) options.
As a result, my phone kept rebooting at about 34% of the boot process. Don't make the same mistakes I did. I've just realized that qcnv deleted the data from the hidden cal_backup partition, not from cal_work.