Hi,
I want to perform both logical (adb pull) and physical acquisition (dd) of Android device. I want to make it more forensically compliant way. So I decided to mount file system read only.
How to mount /data read only. I got a error device is busy when issue mount -oro,remount /data?
What steps else should I consider?
Thank you.
P.S. This is just for student work.
I assume you're still rooted, otherwise chnaces are that filesystem IS already RO unless you remounted specifically to RW.
If mounted RW use
# mount -o ro,remount /data/
Since you're not in terminal on your phone use su before command.
Yes I am rooted, but I am unable to execute commands in adb shell with root
# mount -o ro,remount /data/ -> There seems to be error in command
#mount -o ro,remount /data -> Device or resource busy
Command is correct, there seems to be another problem. Did you ever get ADB to work or is there still some general problem?
If so, really, remove everything ADB related and start right from the beginning installing entire Android SDK following some detailed tutorial (XDA has thousands).
If ADB is up and running and just this command doesn't work it may be phone related - custom ROM and stock ROM sometimes behave differently.
But I am possible to mount /system, the issue is with /data.