KernelSU

A Kernel-based root solution for Android devices.

Note

Official KernelSU support for Non-GKI kernels has been ended.

This is unofficial fork, all rights reserved to @tiann

How to add

curl -LSs "https://raw.githubusercontent.com/rsuntk/KernelSU/main/kernel/setup.sh" | bash -s main

Hook method

1. KPROBES hook:
   • Also used for Loadable Kernel Module (LKM)
   • Default hook method on GKI kernels.
   • Need CONFIG_KSU_MANUAL_HOOK=n
2. Manual hook:
   • Standard KernelSU hook: https://kernelsu.org/guide/how-to-integrate-for-non-gki.html#manually-modify-the-kernel-source
   • backslashxx's syscall manual hook: backslashxx#5
   • Default hook method on Non-GKI kernels.
   • Need CONFIG_KSU_MANUAL_HOOK=y

Features

1. Kernel-based su and root access management.
2. Module system based on 5ec1cff's Magic Mount API on KernelSU
3. App Profile: Lock up the root power in a cage.
4. Bringing back non-GKI/GKI 1.0 support

Compatibility State

KernelSU (before v1.0.0) officially supports Android GKI 2.0 devices (kernel 5.10+). Older kernels (4.14+) are also compatible, but the kernel will have to be built manually.

With this, WSA, ChromeOS, and container-based Android are all supported.

Currently, only arm64-v8a are supported.

Usage

• Installation Instruction
• How to build?
• Official Website

Discussion

• Official KernelSU Telegram: @KernelSU

Security

For information on reporting security vulnerabilities in KernelSU, see SECURITY.md.

License

• Files under the kernel directory are GPL-2.0-only.
• All other parts except the kernel directory are GPL-3.0-or-later.

Credits

• kernel-assisted-superuser: the KernelSU idea.
• Magisk: the powerful root tool.
• genuine: apk v2 signature validation.
• Diamorphine: some rootkit skills.
• 5ec1cff: magic mount api implementation.