Full system access, read and write, has been obtained. And this method is quite easy. A few folks at the xda-developers forum discovered you can start telnet on the device by downloading PTerminal from Android Market, and then you can telnet to the device from your computer.
Once you’ve done that – you’re logged in as root. One simple command mounts the system dir as writable, and away we go.
Here’s the basic process:
Turn on WiFi in the G1 (Settings > Wireless Controls > Wi-Fi). Make sure you’re connected to a network.
Start up PTerminal (search in the Market) and you’ll get a prompt once its launched.
Enter cd system and hit Enter.
Enter cd bin and hit Enter.
Enter telnetd and hit Enter. You’ve now started telnet on your G1.
Enter netstat and hit Enter. You’ll now see your G1’s IP address. You can also find this in the Settings > Wireless Controls > Wi-Fi > and click on your network you’re connected to. It will show you your IP.
Start up Terminal on your OS X machine, or bring up a command prompt on your Windows box. Type telnet [your.ip.address.we.just.found] and hit Enter/Return. So, if your IP was 192.168.1.101, you’d type telnet 192.168.1.101 and hit Enter/Return.
You are logged in as root now. To remount the system file as read write, type mount -oremount,rw /dev/block/mtdblock3 /system from the Terminal/Command Prompt and hit Enter/Return.
This opens a whole world of possibilities.
I’ve put up a fledgling Android file directory and list here. Its not quite complete, and there’s some symlinks in there I didn’t properly label yet, but its a solid start.
Remember, this is the first baby steps to jailbreaking the G1. When the iPhone was initially jailbroken, everything was incredibly dull and tedious to do – all via command line, etc. Heck, when iPhuc came out it was a huge breakthrough, and there was still nothing close to a GUI app. Look for huge steps to be taken soon in making this easier for the average Joe Six Pack.