Assisted by mobileread forum and #kindle-dev.
The serial port must be connected using a 1.8V TTL adapter to the main board of the kindle pw2. Use trial and error to determine the pinout of the TTL serial port (there is no danger of damaging the SOC).
8N1 115200.
For how-to regarding opening the kindle case, refer to the teardown videos on the web. Hardware access to the serial port connector is required for this method. Familiarity with the GNU/Linux boot process (uboot) is also required.
Basic steps of rooting are:
Use the python script which will generate the root password for use in the diagnostic kernel
import hashlib
# B0DXXXXXXXXXXXXX
print("fiona%s"%hashlib.md5("B0DXXXXXXXXXXXXX\n".encode('utf-8')).hexdigest()[13:16])
heavymetal [~/]# python kindle-root.py
fiona3d8
|
Virgin Kindle Paperwhite2 Startup LogStandard kernel bootinfo shutdown:begin:level=6,halt=,special=: info shutdown:closing password dialog:: info blanket_f:loading blanket module:shutdown: info shutdown_showimage:screen:splashing screen:reboot info shutdown_showimage:screen:waiting for reboot screen to come up: info upstart_f:stopping_job:job=lab126: [ 114.643809] Reset Cause readback: 0x2 info upstart_f:stopping_job:job=x: info upstart_f:jobs_stopped:elapsed_ms=4510,timeout_ms=45000: info upstart_f:stopping_job:job=filesystems: info filesystems_userstore:unmount_userstore:Unmounting UserStore: info filesystems_var_local:rotate_log:Rotating Logs: info userstore:run:time=120190,action=stop: info userstore:found_bootup_flag::Found BOOTUP flag file info filesystems_var_local:unmount_varLocal:Unmounting VarLocal: info upstart_f:jobs_stopped:elapsed_ms=4410,timeout_ms=30000: info shutdown:mounting root filesystem read-only:: info shutdown:syncing disks:: info shutdown:end:level=6,halt=: [ 124.581818] imx2-wdt imx2-wdt.0: Device shutdown: Expect reboot! [ 124.587917] Restarting system. U-Boot 2009.08-lab126 (Aug 28 2013 - 15:06:12) CPU: Freescale i.MX6 family TO0.0 at 996 MHz Temperature: 39 C, calibration data 0x5664ee5f mx6sl pll1: 996MHz mx6sl pll2: 528MHz mx6sl pll3: 480MHz mx6sl pll8: 50MHz ipg clock : 66000000Hz ipg per clock : 66000000Hz uart clock : 80000000Hz cspi clock : 60000000Hz ahb clock : 132000000Hz axi clock : 198000000Hz emi_slow clock: 22000000Hz ddr clock : 396000000Hz usdhc1 clock : 198000000Hz usdhc2 clock : 198000000Hz usdhc3 clock : 198000000Hz usdhc4 clock : 198000000Hz MMC: FSL_ESDHC: 0,FSL_ESDHC: 1,FSL_ESDHC: 2 Board: Pinot WFO 2GB Boot Reason: [ POR ] Boot Device: NAND Board Id: (REMOVED) S/N: (REMOVED) I2C: ready DRAM: 256 MB Using default environment In: serial Out: serial Err: serial Quick Memory Test 0x80000000, 0xfff0000 POST done in 59 ms Battery voltage: 4124 mV Hit any key to stop autoboot: 0 ## Booting kernel from Legacy Image at 80800000 ... Image Name: Linux-3.0.35-lab126 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 2420416 Bytes = 2.3 MB Load Address: 80008000 Entry Point: 80008000 Verifying Checksum ... OK Loading Kernel Image ... OK OK Starting kernel ... [ 0.094319] [ 0.253906] LPDDR2 MfgId: 0x1 [Samsung] 3.0.35-lab126 #1 Wed Aug 28 15:30:45 PDT 2013 armv7l Press [ENTER] for recovery menu... 0 //dev/mmcblk0p4: CHS=4/16/43456 size=1423966208 bytes flag type first last lba first lba size Partition p1: 0x00 0x0b 16 |
uboot to diagnostic kernel modeU-Boot 2009.08-lab126 (Aug 28 2013 - 15:06:12) CPU: Freescale i.MX6 family TO0.0 at 996 MHz Temperature: 39 C, calibration data 0x5664ee5f mx6sl pll1: 996MHz mx6sl pll2: 528MHz mx6sl pll3: 480MHz mx6sl pll8: 50MHz ipg clock : 66000000Hz ipg per clock : 66000000Hz uart clock : 80000000Hz cspi clock : 60000000Hz ahb clock : 132000000Hz axi clock : 198000000Hz emi_slow clock: 22000000Hz ddr clock : 396000000Hz usdhc1 clock : 198000000Hz usdhc2 clock : 198000000Hz usdhc3 clock : 198000000Hz usdhc4 clock : 198000000Hz MMC: FSL_ESDHC: 0,FSL_ESDHC: 1,FSL_ESDHC: 2 Board: Pinot WFO 2GB Boot Reason: [ POR ] Boot Device: NAND Board Id: (REMOVED) S/N: (REMOVED) I2C: ready DRAM: 256 MB Using default environment In: serial Out: serial Err: serial Quick Memory Test 0x80000000, 0xfff0000 POST done in 59 ms Battery voltage: 4116 mV Hit any key to stop autoboot: 0 uboot > printenv bootdelay=1 baudrate=115200 loadaddr=0x80800000 rd_loadaddr=(0x80800000 + 0x300000) bootcmd=bootm 0x41000 failbootcmd=panic loglevel=5 bootcmd_diags=bootm 0xE41000 bootcmd_factory=bist halt bootcmd_fastboot=bist fastboot stdin=serial stdout=serial stderr=serial post_hotkeys=0 bootargs= Environment size: 287/1020 bytes uboot > help ? - alias for 'help' base - print or set address offset bist - start Built In Self Test boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootm - boot application image from memory cmp - memory compare coninfo - print console devices and information cp - memory copy crc32 - checksum calculation go - start application at address 'addr' help - print online help idme - idme - Set nv ram variables loop - infinite loop on address range md - memory display mm - memory modify (auto-incrementing address) mtest - simple RAM read/write test mw - memory write (fill) nm - memory modify (constant address) printenv- print environment variables reset - Perform RESET of the CPU run - run commands in an environment variable setenv - set environment variables version - print monitor version uboot > bootm 0xE41000 ## Booting kernel from Legacy Image at 80800000 ... Image Name: Linux-3.0.35-lab126 Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 2420496 Bytes = 2.3 MB Load Address: 80008000 Entry Point: 80008000 Verifying Checksum ... OK Loading Kernel Image ... OK OK Starting kernel ... [ 0.000000] Linux version 3.0.35-lab126 (jenkins-official@jbuild01) (collect2: ld returned 1 exit status) #1 Tue Sep 3 03:12:16 PDT 2013 [ 0.000000] CPU: ARMv7 Processor [412fc09a] revision 10 (ARMv7), cr=10c53c7d [ 0.000000] CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache [ 0.000000] Machine: Freescale i.MX 6SoloLite based Wario Board [ 0.000000] Will try to place printk log at 8fffc000 [ 0.000000] Memory policy: ECC disabled, Data cache writeback [ 0.000000] CPU identified as i.MX6SoloLite, silicon rev 1.2 [ 0.000000] On node 0 totalpages: 65536 [ 0.000000] free_area_init_node: node 0, pgdat c04dcc94, node_mem_map c2000000 [ 0.000000] DMA zone: 64 pages used for memmap [ 0.000000] DMA zone: 0 pages reserved [ 0.000000] DMA zone: 8128 pages, LIFO batch:0 [ 0.000000] Normal zone: 448 pages used for memmap [ 0.000000] Normal zone: 56896 pages, LIFO batch:15 [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 65024 [ 0.000000] Kernel command line: rootwait log_pos_goal=0x8fffc000 console=ttymxc0,115200 root=/dev/mmcblk0p2 ro ip=off debug video=mxcepdcfb:E60,bpp=8,x_mem=3M [ 0.000000] Prink buffer will be relocated to physical address: 8fff2000 [ 0.000000] log_buf_len: 32768 [ 0.000000] early log buf free: 31348(95%) [ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes) [ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes) [ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Memory: 256MB = 256MB total [ 0.000000] Memory: 254652k/254652k available, 7492k reserved, 0K highmem [ 0.000000] Virtual kernel memory layout: [ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB) [ 0.000000] fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB) [ 0.000000] DMA : 0xfde00000 - 0xffe00000 ( 32 MB) [ 0.000000] vmalloc : 0xd0800000 - 0xf2000000 ( 536 MB) [ 0.000000] lowmem : 0xc0000000 - 0xd0000000 ( 256 MB) [ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB) [ 0.000000] .init : 0xc0008000 - 0xc010b000 (1036 kB) [ 0.000000] .text : 0xc010b000 - 0xc04aa000 (3708 kB) [ 0.000000] .data : 0xc04aa000 - 0xc04dd7c0 ( 206 kB) [ 0.000000] .bss : 0xc04dd7e4 - 0xc0504540 ( 156 kB) [ 0.000000] SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:624 [ 0.000000] MXC GPIO hardware [ 0.000000] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 178956ms [ 0.000000] arm_max_freq=1GHz [ 0.000000] MXC_Early serial console at MMIO 0x2020000 (options '115200') [ 0.000000] bootconsole [ttymxc0] enabled [ 0.000000] Console: colour dummy device 80x30 [ 0.258421] Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896) [ 0.316746] pid_max: default: 32768 minimum: 301 [ 0.321626] Mount-cache hash table entries: 512 [ 0.326533] CPU: Testing write buffer coherency: ok [ 0.331557] hw perfevents: enabled with ARMv7 Cortex-A9 PMU driver, 7 counters available [ 0.346483] print_constraints: dummy: [ 0.350433] NET: Registered protocol family 16 [ 0.358690] print_constraints: vddpu: 725 <--> 1300 mV at 700 mV fast normal [ 0.366272] print_constraints: vddcore: 725 <--> 1300 mV at 1475 mV fast normal [ 0.373971] print_constraints: vddsoc: 725 <--> 1300 mV at 1475 mV fast normal [ 0.381638] print_constraints: vdd2p5: 2000 <--> 2775 mV at 2400 mV fast normal [ 0.389371] print_constraints: vdd1p1: 800 <--> 1400 mV at 1100 mV fast normal [ 0.397045] print_constraints: vdd3p0: 2625 <--> 3400 mV at 3000 mV fast normal [ 0.405947] LAB126 Board id - (REMOVED) [ 0.414479] hw-breakpoint: found 6 breakpoint and 1 watchpoint registers. [ 0.421319] hw-breakpoint: 1 breakpoint(s) reserved for watchpoint single-step. [ 0.428654] hw-breakpoint: maximum watchpoint size is 4 bytes. [ 0.434525] L310 cache controller enabled [ 0.438548] l2x0: 16 ways, CACHE_ID 0x410000c8, AUX_CTRL 0x02030000, Cache size: 262144 B [ 0.454805] bio: create slab |
From Diagnostics Menu, Exit to shell, Mount standard file system
1 INFO : Start test
PINOT-WFO-2GB - System Diags
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
~ S ~ Device Setting
P) Touch Sensor Plate Test
O) Operator test suite
E) 511
N) Misc individual diagnostics
Y) nART factory test
U) USB device mode
H) Touch Hold Test
D) Exit, Reboot or Disable Diags
L) Lock diags screen
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 18, Misc individual diagnostics
Command: N
MiscIndividualDiagnostics:exe
1 INFO : Start test
PINOT-WFO-2GB - Misc individual diagnostics
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
~ C ~ Certification Test Mode
I) Wifi Test
G) Gas Gauge
L) LED Test
O) FrontLight test
S) HallSensor detect
V) Video Test
T) Touch Sensor Menu
N) MoviNand
E) Power Test
H) Adjust battery
M) MoviNand/AdjBat/DisableDiags
U) Utilities
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 29, Utilities
Command: U
Utilities:exe
1 INFO : Start test
PINOT-WFO-2GB - Utilities
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
~ O ~ Format user partitions
A) Erase waveform
E) 511 with device info
D) WAN Desense Test
Z) Enable USBnet
M) Mount nfs
S) Stress Tests
R) Run in Test
T) ORT Discharge
W) WIFI Bundle Install
F) Fastboot Bundle Install
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 39, Exit
Command: X
Get X exit code
run: Status: WAIT_FOR_STATUS_EXIT
Parent: Misc individual diagnostics
1 INFO : End test
exe: Status: WAIT_FOR_STATUS_EXECUTED
PINOT-WFO-2GB - Misc individual diagnostics
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
C) Certification Test Mode
I) Wifi Test
G) Gas Gauge
L) LED Test
O) FrontLight test
S) HallSensor detect
V) Video Test
T) Touch Sensor Menu
N) MoviNand
E) Power Test
H) Adjust battery
M) MoviNand/AdjBat/DisableDiags
~ U ~ Utilities
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 39, Exit
Command: X
Get X exit code
run: Status: WAIT_FOR_STATUS_EXIT
Parent: System Diags
1 INFO : End test
exe: Status: WAIT_FOR_STATUS_EXECUTED
PINOT-WFO-2GB - System Diags
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
S) Device Setting
P) Touch Sensor Plate Test
O) Operator test suite
E) 511
~ N ~ Misc individual diagnostics
Y) nART factory test
U) USB device mode
H) Touch Hold Test
D) Exit, Reboot or Disable Diags
L) Lock diags screen
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 30, Exit, Reboot or Disable Diags
Command: D
DisableDiags:exe
1 INFO : Start test
PINOT-WFO-2GB - Exit, Reboot or Disable Diags
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
~ U ~ USB Bundle Install
C) Check Pass/Fail Status
R) Reboot System
D) Disable Diagnostics
L) Exit to login prompt
M) ReportToXml
S) Dump System Logs
X) Exit
(784, 72) pixel not in range (0..768, 0..1024)
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 18, Exit to login prompt
Command: L
ExitToLoginTest:exe
1 INFO : Start test
[testName=HAL_CMD_EXIT_TO_LOGIN]~~~~~
testName = HAL_CMD_EXIT_TO_LOGIN
PINOT-WFO-2GB - Exit to login prompt
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
Are you sure?
~ Q ~ To continue
X) Exit
DiagMenu: dispatchTouchEvent: TOUCH_EVENT_TOUCH_UP::SELECT: line: 11, To continue
Command: Q
Get Q code
run: Status: WAIT_FOR_STATUS_DONE
1 PASS : 143
1 INFO : End test
exe: Status: WAIT_FOR_STATUS_EXECUTED
PINOT-WFO-2GB - Exit, Reboot or Disable Diags
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
U) USB Bundle Install
C) Check Pass/Fail Status
R) Reboot System
D) Disable Diagnostics
~ L ~ Exit to login prompt
M) ReportToXml
S) Dump System Logs
X) Exit
(784, 72) pixel not in range (0..768, 0..1024)
1 PASS : 138
1 INFO : End test
exe: Status: WAIT_FOR_STATUS_EXECUTED
PINOT-WFO-2GB - System Diags
~~~~ 1.12.536.206610 ~~~~
pcbId:(PCBID REMOVED)
S) Device Setting
P) Touch Sensor Plate Test
O) Operator test suite
E) 511
N) Misc individual diagnostics
Y) nART factory test
U) USB device mode
H) Touch Hold Test
~ D ~ Exit, Reboot or Disable Diags
L) Lock diags screen
X) Exit
1 INFO : End test
Exit to login prompt: 1
/etc/init.d/rcS: line 121: boot_milestone: not found
starting pid 1642, tty '': '/bin/sh /etc/getty-diags'
Welcome to Kindle!
kindle login: root
Password:
#################################################
# N O T I C E * N O T I C E * N O T I C E #
#################################################
Rootfs is mounted read-only. Invoke mntroot rw to
switch back to a writable rootfs.
#################################################
[root@kindle root]#
[root@kindle root]#
[root@kindle root]#
[root@kindle root]# mount
rootfs on / type rootfs (rw)
/dev/root on / type ext3 (ro,noatime,nodiratime,barrier=0,data=writeback)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
tmpfs on /dev type tmpfs (rw,relatime,mode=755)
tmpfs on /dev/shm type tmpfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,gid=5,mode=620)
tmpfs on /var type tmpfs (rw,relatime,size=0k)
/dev/mmcblk0p3 on /var/local type ext3 (rw,relatime,errors=continue,barrier=0,data=writeback)
/dev/loop/0 on /mnt/base-us type vfat (rw,noexec,noatime,nodiratime,fmask=0022,dmask=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)
fsp on /mnt/us type fuse.fsp (rw,nosuid,nodev,noatime,user_id=0,group_id=0)
[root@kindle root]#
[root@kindle root]#
[root@kindle root]# cd /mnt
[root@kindle /mnt]# ls
base-mmc base-us mmc rwfs us wfm
[root@kindle /mnt]# ls mmc
[root@kindle /mnt]# ls /dev/mmc*
/dev/mmcblk0 /dev/mmcblk0boot1 /dev/mmcblk0p2 /dev/mmcblk0p4
/dev/mmcblk0boot0 /dev/mmcblk0p1 /dev/mmcblk0p3
[root@kindle /mnt]# ls -l /dev/mmc*
brw-rw---- 1 root root 179, 0 Oct 9 16:03 /dev/mmcblk0
brw-rw---- 1 root root 179, 8 Oct 9 16:03 /dev/mmcblk0boot0
brw-rw---- 1 root root 179, 16 Oct 9 16:03 /dev/mmcblk0boot1
brw-rw---- 1 root root 179, 1 Oct 9 16:03 /dev/mmcblk0p1
brw-rw---- 1 root root 179, 2 Oct 9 16:03 /dev/mmcblk0p2
brw-rw---- 1 root root 179, 3 Oct 9 16:03 /dev/mmcblk0p3
brw-rw---- 1 root root 179, 4 Oct 9 16:04 /dev/mmcblk0p4
[root@kindle /mnt]# mount /dev/mmcblk0p1 /mnt/mmc
EXT3-fs: barriers not enabled
kjournald starting. Commit interval 5 seconds
EXT3-fs (mmcblk0p1): using internal journal
EXT3-fs (mmcblk0p1): recovery complete
EXT3-fs (mmcblk0p1): mounted filesystem with writeback data mode
[root@kindle /mnt]# cd /mnt/mmc
[root@kindle mmc]# ls
bin dev etc lib mnt opt proc sbin sys tmp usr var
[root@kindle etc]# echo 'jonathan::0:0:Jonathan:/tmp/root:/bin/sh' >>etc/passwd
[root@kindle etc]# echo 'jonathan:*:15826:0:99999:7:::' >>etc/shadow
[root@kindle etc]# echo 'jonathan:*:15826:0:99999:7:::' >>etc/shadow-
[root@kindle /mnt]# cat etc/passwd
root:x:0:0:root:/tmp/root:/bin/sh
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:100:sync:/bin:/bin/sync
operator:x:37:37:Operator:/var:/bin/sh
sshd:x:103:99:Operator:/var:/bin/sh
messagebus:x:92:92:messagebus:/bin/false
nobody:x:99:99:nobody:/tmp:/bin/sh
default:x:1000:1000:Default non-root user:/dev/null:/bin/sh
framework:x:9000:150:Framework User:/tmp/framework:/bin/sh
jonathan::0:0:Jonathan:/tmp/root:/bin/sh
[root@kindle /mnt]# cat etc/shadow
root:*:15826:0:99999:7:::
daemon:*:10933:0:99999:7:::
bin:*:10933:0:99999:7:::
sys:*:10933:0:99999:7:::
sync:*:10933:0:99999:7:::
operator:*:10933:0:99999:7:::
sshd:*:10933:0:99999:7:::
messagebus:*:10933:0:99999:7:::
nobody:*:10933:0:99999:7:::
default:!:15826:0:99999:7:::
framework:*:15826:0:99999:7:::
jonathan:*:15826:0:99999:7:::
[root@kindle /mnt]# cat etc/shadow-
root:*:15826:0:99999:7:::
daemon:*:10933:0:99999:7:::
bin:*:10933:0:99999:7:::
sys:*:10933:0:99999:7:::
sync:*:10933:0:99999:7:::
operator:*:10933:0:99999:7:::
sshd:*:10933:0:99999:7:::
messagebus:*:10933:0:99999:7:::
nobody:*:10933:0:99999:7:::
default:!:15826:0:99999:7:::
framework::15826:0:99999:7:::
jonathan::15826:0:99999:7:::
[root@kindle /mnt]#
|
Restart and allow startup in standard mode, then log in with new account, get Root shell.Welcome to Kindle! kindle login: Welcome to Kindle! kindle login: jonathan ################################################# # N O T I C E * N O T I C E * N O T I C E # ################################################# Rootfs is mounted read-only. Invoke mntroot rw to switch back to a writable rootfs. ################################################# Reset Cause readback: 0x2 MAC from kernel xx:xx:xx:xx:xx:74 [root@kindle root]# [root@kindle root]# [root@kindle root]# [root@kindle root]# [root@kindle root]# [root@kindle root]# ls [root@kindle root]# pwd /var/tmp/root [root@kindle root]# cd /var [root@kindle /var]# ls backups cache lib local lock log run tmp [root@kindle /var]# [root@kindle /var]# [root@kindle /var]# mount rootfs on / type rootfs (rw) /dev/root on / type ext3 (ro,noatime,nodiratime,barrier=0,data=writeback) none on /proc type proc (rw,nosuid,nodev,noexec,relatime) none on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) tmpfs on /dev type tmpfs (rw,relatime,mode=755) tmpfs on /dev/shm type tmpfs (rw,relatime) devpts on /dev/pts type devpts (rw,relatime,gid=5,mode=620) tmpfs on /var type tmpfs (rw,relatime,size=32768k) /dev/loop/2 on /usr/share/X11/xkb type cramfs (ro,noatime,nodiratime) /dev/loop/3 on /usr/java/lib/fonts type cramfs (ro,noatime,nodiratime) /dev/loop/4 on /etc/kdb.src type cramfs (ro,noatime,nodiratime) /dev/loop/5 on /usr/lib/locale type cramfs (ro,noatime,nodiratime) /dev/loop/6 on /usr/share/keyboard type cramfs (ro,noatime,nodiratime) /dev/mmcblk0p3 on /var/local type ext3 (rw,relatime,errors=continue,barrier=0,data=writeback) /dev/loop/0 on /mnt/base-us type vfat (rw,noexec,noatime,nodiratime,fmask=0000,dmask=0000,allow_utime=0022,codepage=cp437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro) fsp on /mnt/us type fuse.fsp (rw,nosuid,nodev,noexec,noatime,user_id=0,group_id=0,allow_other) [root@kindle /var]# |