Promise NS4300N - That darn buzzer

I'm working on the latest SR5 firmware - 01.05.0000.12.

Used the telnet plugin and I have engmode access to the unit.

Through the web interface everything seems perfectly fine:

36C CPU temp
2960 fan speed
all power is within accepted ranges (running off APC backup unit)

Buzzer is disabled in options

Raid status is functional, and I cannot see any errors with the disks at all.

Nothing in the event logs other than startups and shutdowns.

Intermittently the damn thing beeps several times in succession. I've no idea why at this point, and I don't care. Just want to disable it. If I can't do it through software, I'm sure my power drill will come in handy.

Spent the last 20 minutes with telnet access and cannot even find a binary or config file that deals with the buzzer.

Anybody that has experience hacking into these units have any idea on how to completely disable the buzzer?

Okay, I found a binary, buzzerctl. It has 0 -7 that can be passed to turn off the buzzer, or make different series of beeps.

I was thinking of renaming the binary and replacing it with something that just spits out a 0, which should indicate success to the calling program if it's even looking for it.

Problem is that i need actual root access to do it. Trying to mount the plugin directory from a remote CentOS box does not work (probably permissions) and I'm in a read only state.

Any idea on how to get root on this device when you are running SR5 firmware?