Yes I did everything on another machine.
Note monitor.app is not in ebrmain, but in cramfs.img (I used cramfsck for extraction). I guess it could be copied without specific privileges from a running system. Then you would need root to remount rw /ebrmain and replace the link, or modify /etc/init.d/rcS to use the patched app.
|