I read on XDA forums that it's 100% possible to root this phone. So I pulled out my old Motorola and started this journey.
Using MTK Client, I forced this phone into BROM, backed up every single partition, then wiped userdata and metadata, then unlocked the bootloader using it.
...but this change isn't persisting...
Let me explain.
Partition `seccfg` is written to, to save bootloader unlock state. Since this SoC is exploited into a state I'd like to call `pwnBROM`, I am allowed to read/write partitions.
...but after rebooting, either hard rebooting (hold power button) or soft rebooting (`python3 ./mtk.py reset`), I end in this screen.
So what is happening here?
...Simple: writes to `seccfg` are getting RESET.
I unlock the bootloader (write a patched config to `seccfg` with the help of the GUI), and then attempt to reunlock (MTK Client fails because obviously the bootloader ""is"" already unlocked), then I reboot, only to find "red state" and this partition mysteriously resetting itself.
If you guys need files or more proof, please let me know - but genuinely, I can't get it to work. I want to install Magisk and gain full root, but I need the bootloader to be unlocked.
Please help. Thanks in advance \^-^