How to re-unlock bootloader for OnePlus One

In my search, I came across an interesting thread that was related, but in order to install their script, you need to have a custom recovery tool installed or to be able to boot into it (e.g. fastboot boot recovery.img).

I had the stock Cyanogen Recovery tool and I couldn't boot into TWRP because of my actual problem (cannot unlock bootloader anymore), so I dug inside their script and used the content meant to reset the lock and tamper bits of the bootloader.

Now I could run the commands manually if I had root access and luckily, in CM 13 ROM, you can enable it from 'Developer options' menu.

Here are the commands I used after enabling root access for ADB:

adb root
  # restart the adbd daemon with root permissions

adb shell
 # run remote shell interactively

dd bs=1 count=1 skip=1048080 if=/dev/block/platform/msm_sdcc.1/by-name/aboot 2>/dev/null | xxd | cut -c 10-
  # print the lock bit state (00 - locked, 01 - unlocked)

echo -ne "\x01" | dd bs=1 count=1 seek=1048080 of=/dev/block/platform/msm_sdcc.1/by-name/aboot

# set the lock bit to unlocked(01)

dd bs=1 count=1 skip=1048084 if=/dev/block/platform/msm_sdcc.1/by-name/aboot 2>/dev/null | xxd | cut -c 10-
  # print the tamper bit state (00 - untampered, 01 - tampered)

echo -ne "\x00" | dd bs=1 count=1 seek=1048084 of=/dev/block/platform/msm_sdcc.1/by-name/aboot

# set the tamper bit to untampered(00)

Result:

$fastboot oem device-info

...

(bootloader)
 Device tampered: false

(bootloader)
 Device unlocked: true

(bootloader)
 Charger screen enabled: false

(bootloader)
 Display panel:

(bootloader)
 console_enabled: 0

(bootloader)
 exec_console_unconsole: 0

I guess the tamper bit is changed the first time you unlock the bootloader (fastboot oem unlock) and after you lock it back (fastboot oem lock) it won't allow you to re-unlock.