All we need to do now is mount our romfs image, unzip the arm7-nettools.zip, copy the arm7 bFLT binaries over to bin, add telnetd, sshd, and ftpd to our \/bin\/init, and rebuild by running genromfs on our filesystem.<\/p>\n
\nDon’t forget that romfs is a read only file system, so we can’t modify it by mounting it. We need to mount, copying everything to elsewhere, do our required bits and pieces, then rebuild.<\/p>\n
eg<\/p>\n
mount -o loop -t romfs still_unsure.img \/mnt\/test -r<\/p>\n
mkdir \/mnt\/new
\ncd \/mnt
\nrsync -arv \/mnt\/test\/ new
\ncd new\/bin
\nwget http:\/\/www.computersolutions.cn\/blog\/wp-content\/uploads\/2010\/04\/arm7-nettools.zip
\nunzip arm7-nettools.zip
\nrm arm7-nettools.zip<\/p>\n
[We need to also edit init]
\npico init<\/p>\n
Add <\/p>\n
sshd&
\ntelnetd&
\nftpd&<\/p>\n
eg –
\ncat init
\nmount -t proc none \/proc
\nmount -t ramfs none \/usr
\nmount -t ramfs none \/swap
\nmount -t ramfs none \/var\/run
\nmount -t ramfs none \/etc
\nmount -t ramfs none \/flash
\nmount -t ramfs none \/home
\ncamera&
\nsshd&
\ntelnetd&
\nftpd&
\nsh<\/p>\n
Change to the next directory up, and lets run genromfs<\/p>\n
genromfs -d new -f testrom.img
\ndebian:\/mnt# ls testrom.img
\ntestrom.img
\ndebian:\/mnt# ls -al testrom.img
\n-rw-r–r– 1 root root 3329024 2010-04-30 04:18 testrom.img<\/p>\n
In theory, this should be usable (famous last words!).\n<\/p><\/blockquote>\n
Unfortunately, I can’t try testing on that at home, as all the equipment is at the office, but that should be fairly easy.<\/p>\n
Probably also some small config issues to sort out, as ftpd, telnetd and sshd will probably choke without their related \/etc\/whatever config files needed, but we can sort that out via serial on the debug ports.<\/p>\n","protected":false},"excerpt":{"rendered":"
So far in this series, we’ve learnt a few things. First, is that this hardware is quite nice for hacking purposes, as they’ve left the uBoot in a nice state, and have easily accessible debug ports. Second is that doing this kind of thing isn’t really that complicated, and can be quite fun. We’re pretty […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[252,1],"tags":[248,258,245,118,240,250,249,247],"class_list":["post-489","post","type-post","status-publish","format-standard","hentry","category-ip-cam","category-uncategorized","tag-arm7","tag-debian","tag-foscam","tag-howto","tag-ipcam","tag-nc745","tag-nuvoton","tag-uclinux"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/posts\/489","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/comments?post=489"}],"version-history":[{"count":13,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions"}],"predecessor-version":[{"id":918,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/posts\/489\/revisions\/918"}],"wp:attachment":[{"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/media?parent=489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/categories?post=489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.computersolutions.cn\/blog\/wp-json\/wp\/v2\/tags?post=489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}