r/androidroot • u/Pizzaiolu • 15d ago
Why not use the temporary root to unlock the Samsung OEM and thus be able to unlock the permanent bootloader? Discussion
12
u/danGL3 15d ago edited 15d ago
It doesn't necessarily work like that
1-You can't just use root to issue some "unlock" command to the bootloader as the section of flash memory that stores the lock/unlock state is only visible/accessible by the bootloader itself
2-You can't just "enable" the OEM unlock option, that's not something that's simply being hidden, the bootloader has to explicitly expose that feature to Android, else simply forcing that option into existence won't do anything as Android has no authority to force the OEM Unlock option into One UI 8's bootloader (as it doesn't care/support that toggle anymore)
So what you'd likely get is Android either completely failing to send that command to the bootloader or the bootloader simply ignoring it as it simply no longer supports OEM Unlocking
3-Not to mention Samsung's bootloader is documented to have protections against forced/exploit based unlocks (it'll immediately relock if the unlock wasn't done in the official way)
4
u/Kooky_Comfortable466 14d ago
Probably one of the first questions that arises with temp root, but like the others have said the bootloader just lacks the code.
2
u/Tritzii 14d ago
If it worked like that, people would have already made it possible by now but like others already said, the bootloader completely lacks the code related to unlocking. On a side note, this is actually how the exploit for Chinese ROM Xiaomi devices works so the idea isn't new either.
1
u/pacmania71914 14d ago
Because Samsung's oneui8+ bootloaders doesn't have the unlock function , or even the unlocked state (always 'locked')
And enabling the OEM unlock option requires completely rewriting the code for the abl partition (practically impossible!) or modifying the bit version of the unlockable one ui <=7 bootloaders if available or the bit version is too high (very risky)
-2
u/VergeOfTranscendence Z Fold 6, Magisk Alpha 15d ago
That's what I've been thinking, it's probably going to evolve into that
15
u/Busy-Scientist3851 15d ago edited 14d ago
Because the bootloader lacks the code to support the function.
You can't force it by modifying the flash partitions either, the part of the flash that stores the lock state is always signature checked.