Yesterday, we told you that Amazon's newest Kindles are shipping with locked bootloaders. We mentioned that this probably wouldn't prevent the devices from being rooted, as a method was already in the works. That method has now been confirmed, and root for the Kindle Fire HD is go!

This is confirmed to work on the Fire HD 7, but should work on all new variants that are based on ICS.

First off, this exploit is actually based one that was found on the Transformer Prime in ICS by sparkym3, so full credit goes to him.

Before you get started, you need to download SU:

After you download the file, extract the contents and pull SU from /system/bin/ and SuperUser.apk from /system/app/ and put them in the directory you'll be working from.

After that, execute the following commands:

adb shell
    rm -r /data/local/tmp
    ln -s /data/ /data/local/tmp

adb reboot

adb shell
    echo 'ro.kernel.qemu=1' > /data/local.prop

abd reboot

adb shell mount -o remount,rw /system
adb push su /system/xbin/su
adb shell
    chown 0.0 /system/xbin/su
    chmod 06755 /system/xbin/su
    rm /data/local.prop

adb reboot

adb install Superuser.apk

After that, you should have root access. Congratulations!

If you happen to hit any snags along the way, head over to this support thread on RootzWiki.

Cameron Summerson
Cameron is a self-made geek, Android enthusiast, horror movie fanatic, musician, and cyclist. When he's not pounding keys here at AP, you can find him spending time with his wife and kids, plucking away on the 6-string, spinning on the streets, or watching The Texas Chainsaw Massacre on repeat.

  • http://www.androidpolice.com/ Artem Russakovskii

    That didn't last long. Let's see how far off the bootloader unlock is.

  • blunden

    Ah, a version of the classic symlink local.prop somewhere and trick Android that it's an emulator build (ie. ro.kernel.qemu=1). :)

  • JB

    can someone upload the system dump or .apks? The hc/ics/jb devices are aching for a chance at the new instant video .apk.

  • kyle

    whats the directory???

  • http://www.facebook.com/profile.php?id=1383341673 Cory V. Williams

    once i input
    echo 'ro.kernel.qemu=1' > /data/local.prop
    i get this
    echo 'ro.kernel.qemu=1' > /data/local.prop
    echo 'ro.kernel.qemu=1' > /data/local.prop

  • http://www.facebook.com/profile.php?id=1383341673 Cory V. Williams

    please help

  • riverosr

    Hi, thanks for this great info.
    I have a problem:
    When it use "adb Shell" it show me: "error: device not found"
    I have the newest driver for my kindle, i had unistalled and reinstalled the dirver but it still happen.
    I had installed the SDK in other route (C:/users/my_user/appdata/local/android/android-sdk), it's posible that the error happens because i had the instalation of SDK in this route?
    Thanks a lot.

    • Detrick

      Hey did you ever figger it out.

      • riverosr

        UPDATE 29-10-2012
        The problem was solved:

        I used other PC (a desktop PC) and in that PC the procedure worked fine. Thanks a Lot.

  • Pauly D

    I have tried so hard to try to do this, and my device just wont get reconized. I have no idea what to do next. Im very pissed off because i cant put the ADB Driver on my Kindle Fire HD. I need help NOW!

  • Sukok

    You guys are faggots

    • nhmhgcz

      I wanna rip ur fukkin head off and shit down ur neck.

  • usnmustanger

    Can't get past the "echo 'ro.kernel.qemu=1' > /data/local.prop" step. I keep getting permissions errors: "cannot create /data/local.prop: Permission denied". Anyone know how to fix this?

    (FWIW, I can cd into '/data', but can't 'ls' the data directory--Permission Denied. Dammit.

  • Ciro Nelson

    Can't get past the "echo 'ro.kernel.qemu=1' > /data/local.prop" step. I keep getting permissions errors: "cannot create /data/local.prop: Permission denied". Anyone know how to fix this?

  • Ciro Nelson

    shell by Windows XP sp3...

  • user

    when I try to mount it says "Operation not permitted" and not sure where to go from there. Up to that point it works

  • Rob-bot

    Absolutely does not work. No permission to modify the /data files. Complete BS. Why would I need to root if I could already alter the protected files?

  • faku

    guys if you have a Kindle Fire HD 7'' with 7.2.3 and this method doesn't work, go to my post i found another way to root it, and it worked for me and my friends!

  • person

    How do u put in commands and where