Skip to content

feat(ksud): support set selinux context in su - #3653

Merged
5ec1cff merged 3 commits into
mainfrom
context
Aug 22, 2026
Merged

feat(ksud): support set selinux context in su#3653
5ec1cff merged 3 commits into
mainfrom
context

Conversation

@5ec1cff

@5ec1cff 5ec1cff commented Aug 22, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@5ec1cff
5ec1cff requested a lite review from Copilot August 22, 2026 08:30
Copilot AI reviewed Aug 22, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The new -Z/--context option introduces argument-parsing and execution-order issues that can prevent the context from being applied correctly and can misparse invocations.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR extends the ksud built-in su implementation to optionally set an SELinux context for the spawned shell/process, and broadens ksud’s “act like su” detection when invoked via different su paths.

Changes:

  • Add -Z/--context option to su and attempt to apply it by writing to /proc/thread-self/attr/current.
  • Apply SELinux context in the pre_exec path when launching the target shell/command.
  • Treat any argv[0] ending with /su as invoking su mode (not just su or /system/bin/su).
File summaries
File Description
userspace/ksud/src/su.rs Adds -Z/--context handling and SELinux context write in the su execution path
userspace/ksud/src/cli.rs Broadens su-mode detection to arg0.ends_with("/su")
Review details
  • Files reviewed: 2/2 changed files
  • Comments generated: 3
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread userspace/ksud/src/su.rs
Comment thread userspace/ksud/src/su.rs Outdated
Comment thread userspace/ksud/src/su.rs Outdated
@5ec1cff
5ec1cff merged commit dab9430 into main Aug 22, 2026
20 checks passed
@5ec1cff
5ec1cff deleted the context branch August 22, 2026 15:14
pershoot pushed a commit to KernelSU-Next/KernelSU-Next that referenced this pull request Aug 22, 2026
@5ec1cff @pershoot
feat(ksud): support set selinux context in su (tiann/KernelSU#3653)
9076090
fulu2778 pushed a commit to fulu2778/KernelSU that referenced this pull request Aug 22, 2026
@5ec1cff BuildBot
feat(ksud): support set selinux context in su (tiann#3653)
dd0e501 
(cherry picked from commit dab9430)
Anatdx added a commit to Rouyashiki/YukiSU that referenced this pull request Aug 22, 2026
@Anatdx @5ec1cff
feat(ksud): support setting the SELinux context in su
85ec7ac 
Rewrite of upstream tiann/KernelSU#3653 for the C++ ksud: -Z/--context
dyntransitions the thread via /proc/thread-self/attr/current just before
exec, so the shell or command runs in the requested context.

The switch happens after the uid/gid change on purpose. Doing it first
would move the capability:setuid check into the target domain, which a
confined domain denies, leaving the process root in the new domain. An
empty or rejected context aborts instead of exec'ing, so a caller asking
to be confined never silently gets an unconstrained root shell; for the
same reason set_identity now propagates setgroups/setres*id failures.

-z is accepted alongside -Z for Magisk compatibility, which also makes the
existing -cn -> -z translation reachable - it was dead code because -z was
never registered. No sepolicy change is needed: apply_kernelsu_rules()
already makes the su domain permissive and allows it everything, covering
process:setcurrent and process:dyntransition.

Verified on PLC110 (Android 16, kernel 6.6): -Z, -z, -cn, --context and
--context= all reach u:r:shell:s0 and u:r:untrusted_app:s0; an unknown
domain and an empty value each fail with rc=1 without exec'ing; and
"su -Z u:r:shell:s0 2000" lands on uid 2000 in u:r:shell:s0.

Options placed after the username ("su 2000 -c id") stay broken, which
predates this change: getopt is called with a leading "+" and stops at the
first non-option, so the -Z entry #3653 adds to upstream's
first_non_option list has no counterpart here.

Co-authored-by: 5ec1cff <ewtqyqyewtqyqy@gmail.com>
AlexLiuDev233 pushed a commit to Baka-SU/BakaSU that referenced this pull request Aug 26, 2026
@5ec1cff @AlexLiuDev233
ksud: support set selinux context in su (tiann/KernelSU#3653)
c6fb4ee 
[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
luyanci pushed a commit to Baka-SU/BakaSU that referenced this pull request Aug 27, 2026
@5ec1cff @luyanci
ksud: support set selinux context in su (tiann/KernelSU#3653)
3091439 
[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
AlexLiuDev233 pushed a commit to Baka-SU/BakaSU that referenced this pull request Aug 28, 2026
@5ec1cff @AlexLiuDev233
ksud: support set selinux context in su (tiann/KernelSU#3653)
71fb420 
[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
xMikkkaa pushed a commit to xMikkkaa/chimera_kernel_beryllium that referenced this pull request Aug 28, 2026
@5ec1cff @github-actions
sync(kernelsu): update submodule to 71fb420
ccae75d 
    ksud: support set selinux context in su (tiann/KernelSU#3653)

[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
xMikkkaa pushed a commit to xMikkkaa/chimera_kernel_beryllium that referenced this pull request Aug 28, 2026
@5ec1cff @github-actions
sync(kernelsu): update submodule to 71fb420
d2526d5 
    ksud: support set selinux context in su (tiann/KernelSU#3653)

[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
Flopster101 added a commit to FlopKernel-Series/flop_exynos2100_kernel that referenced this pull request Sep 2, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from f532f18c2198..0b5efe9e0102
77adf67 
0b5efe9e0102 chore(license): rename LICENSE_icon_简体中文 to LICENSE_icon_SC (#381)
aa7c82a7f5b5 chore(license): add icon license and update license references (#380)
738b01a81521 build(deps): bump log from 0.4.33 to 0.4.34 in /userspace/ksuinit in the crates group (#377)
bef79c339794 build(deps): bump actions/setup-java from 5 to 6 in the actions group (#378)
4a4b30f08391 build(deps): bump the crates group in /userspace/ksud with 4 updates (#379)
b4e5faef6bf4 ksud: reuse ZIP archive and validate module IDs (#376)
3e80ad77258e ksud: call post_ota() only once after OTA flash (#375)
736d9fe8a66c ksud: improve slot info parsing speed
a543d21c5f1c kernel: synchronization the first track_throne of the late-load
82c7f72d6486 build: bump ddk to 20260828, support android17-6.18 (tiann/KernelSU#3663)
83614d892d5f manager: update translations from Weblate (#365)
d5298be49b7e ksud: Fix su identity argument handling (tiann/KernelSU#3659)
419e270b50ad kernel, ksud, manager: Perform umount for webview zygote (tiann/KernelSU#3630)
71fb420de5e9 ksud: support set selinux context in su (tiann/KernelSU#3653)
6f50cba2a391 selinux hide: spoof status page and avd seqno (tiann/KernelSU#3647)
f2ceaddeeecf bot: add warning info of dev branch
4b46b7594915 manager: fix android lints (#369)
25d94debe0ec manager: Do not show Uninstall when in JailBreak
291d92b840c9 ksud, ksuinit: block mkp too
4e1d11c31620 ci: unified lint check
c4c7829fc333 ci: remove build rust std core (#368)
7bb6f0df4162 build(deps): bump the crates group across 1 directory with 7 updates (#366)

git-subtree-dir: drivers/sukisu
git-subtree-split: 0b5efe9e0102c43ca5c41174d500f5a7080cd0c7
Flopster101 added a commit to FlopKernel-Series/flop_trinket-mi_kernel that referenced this pull request Sep 3, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from ca62a37fc328..0b5efe9e0102
edd4ca7 
0b5efe9e0102 chore(license): rename LICENSE_icon_简体中文 to LICENSE_icon_SC (#381)
aa7c82a7f5b5 chore(license): add icon license and update license references (#380)
738b01a81521 build(deps): bump log from 0.4.33 to 0.4.34 in /userspace/ksuinit in the crates group (#377)
bef79c339794 build(deps): bump actions/setup-java from 5 to 6 in the actions group (#378)
4a4b30f08391 build(deps): bump the crates group in /userspace/ksud with 4 updates (#379)
b4e5faef6bf4 ksud: reuse ZIP archive and validate module IDs (#376)
3e80ad77258e ksud: call post_ota() only once after OTA flash (#375)
736d9fe8a66c ksud: improve slot info parsing speed
a543d21c5f1c kernel: synchronization the first track_throne of the late-load
82c7f72d6486 build: bump ddk to 20260828, support android17-6.18 (tiann/KernelSU#3663)
83614d892d5f manager: update translations from Weblate (#365)
d5298be49b7e ksud: Fix su identity argument handling (tiann/KernelSU#3659)
419e270b50ad kernel, ksud, manager: Perform umount for webview zygote (tiann/KernelSU#3630)
71fb420de5e9 ksud: support set selinux context in su (tiann/KernelSU#3653)
6f50cba2a391 selinux hide: spoof status page and avd seqno (tiann/KernelSU#3647)
f2ceaddeeecf bot: add warning info of dev branch
4b46b7594915 manager: fix android lints (#369)
25d94debe0ec manager: Do not show Uninstall when in JailBreak
291d92b840c9 ksud, ksuinit: block mkp too
4e1d11c31620 ci: unified lint check
c4c7829fc333 ci: remove build rust std core (#368)
7bb6f0df4162 build(deps): bump the crates group across 1 directory with 7 updates (#366)
f532f18c2198 manager: update translations from Weblate (#356)
4a3785025a92 kernel: always don't unregister in input_hook
03b60f260cce kernel: sync with latest susfs
b2ac2fc8703c kernel: filter kernel modules at load time (#319)
746686390b0c manager: Add option to use Jetbrians Mono when in terminal screen (#341)
ecba913bd072 ksud, manager: change the susfs config persistent switch to susfs manager switch (#354)
93a08ffcbb7d fix(kernel): adapt to backport of 6.6 kernel, fix tiann/KernelSU#3629 (tiann/KernelSU#3632)
d56d3bf099f5 ci: split LKM architecture
cc44ff62d9dc kernel: compat for old hooks
9671b9d11e45 kernel: Handle execveat for new bionic libc (tiann/KernelSU#3639)
75b99e3e2f31 kernel, ksud: refactor sucompat (tiann/KernelSU#3521)
06390a6acbb7 [skip ci] manager: remove values-idn
9918a8dbf164 manager: update translations from Weblate (#352)
cdce8bb8c8bf fix(ksud): Fix buffer overflow caused by android-properties library
c3592697647a ksud: boot-patch-v2: remove redundant security check (tiann/KernelSU#3627)
19edfa86beab manager: update translations from Weblate (#349)
e0a383dae406 manager: load app icons with AppIconLoader and other minimal fixes
d0a8b1159170 manager: SearchBar automatic folding, module card padding and other minimal fixes
8e2b9945b4f8 build(deps): bump the crates group across 1 directory with 6 updates (#313)
f37ca4d8131c script: the standard eol is lf for *.sh
829f61fb008c refactor(ksuinit): Remove meaningless /sys mount (tiann/KernelSU@bc5d544)
faccf4c5edc7 ci: do not upload to telegram when build manager was been called
ceda24ca2bae ci: fix cannot trigger manager build & PR x86 LKM
38343aa70c97 ksud: Use kernel BTF for boot image injection(tiann/KernelSU@4a5f431)
d74beecfe942 ksud: Add boot image LKM injection(tiann/KernelSU@f5a3b5a)
ff3537fe0cef ksud: fix boot_patch no_custom_rc is unused
df7b0baa93de feat: add x64 lkm (tiann/KernelSU#3570)
48aae43c3c91 manager: update translations from Weblate (#337)
823db144f798 ci: fix release x2 (#347)
3b70416f469c kernel: fix handle_sepolicy won't set success_cmd_count in nongki (#342)
4ddbaf43512b ci,script: fix release
a9216b04e29c manager: migrate app to Koin-backed layered architecture (#345)
676be77fd677 build(deps): bump the crates group across 1 directory with 62 updates (#344)
3ef06b0fcb09 [skip ci]docs,ci: drop crowdin
b267ab11af0d Reapply "ksubot: Do not show link preview when send message"
aff9a23feeeb ksud: drop static banner file, use figlet-rs (#336)

git-subtree-dir: drivers/sukisu
git-subtree-split: 0b5efe9e0102c43ca5c41174d500f5a7080cd0c7
Flopster101 added a commit to FlopKernel-Series/flop_s5e8825_kernel that referenced this pull request Sep 16, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from 930f61a654f3..3576e6a5255f
b509949 
3576e6a5255f manager: update translations from Weblate (#404)
3341f9c4859a manager: Add floating navigation bar with a customization toggle (#334)
7e92d45ed5c7 ksud, ksuinit: use our forks for dependencies (#412)
7741f87849f7 kernel: retain capabilities across execve for non-root profiles (tiann/KernelSU#3710)
c04159fcbdfd manager: improve superuser sort (#405)
601f6d2af480 manager: refine home page state get
b1954220ce1a manager: workaround for ListItem crash
3380d41f2043 ksud: sync upstream commit
fa1da13f890a manager: update translations from Weblate (#402)
19b6f4213ca1 manager: bump the maven group across 1 directory with 18 updates and other minimal fixes (#351)
052ca27775cc kernel: compat for old version of susfs and include task_stack.h for LTO (#403)
6930e97b59f8 kernel: add setup submodule command(#183)
4f27ee12d168 build(deps): bump the crates group across 1 directory with 4 updates (#399)
07a28eb8226b build(deps): bump the crates group in /userspace/ksuinit with 2 updates (#396)
7ad75c5df357 kernel: get session_keyring from key_permission LSM call
246d3e52e667 manager: replace SettingsJumpPageWidget with SettingsChooseWidget (#401)
1e25a4c5c0e7 manager: update translations from Weblate (#400)
23a40c0f1dc0 manager: update translations from Weblate (#395)
830a5aedc742 kernel: Reject all signature block id except v2 (tiann/KernelSU#3700)
4e82e3224341 feat(resetprop): support update long value for ro props (tiann/KernelSU#3696)
ff765f850754 feat: new version matching detection mechanism (tiann/KernelSU#3516)
f1ae2cebb350 kernel, uapi, ksud: make fd wrapper work with app profile (tiann/KernelSU#3679)
fdd18805bdac feat(ksud): Implement SIGSYS handler (tiann/KernelSU#3677)
f5992bfce3b2 fix(kernel): Preserve a ebitmap's size for each policy type (tiann/KernelSU#3680)
5fe98409dc52 refactor(kernel, ksud, manager): Switch webview zygote umount to allowlist (tiann/KernelSU#3666)
f1dd81dc96d7 manager: update translations from Weblate (#392)
88695111d70a kernel: restore legacy fake policy rwlock initialization (#393)
3c1882886dbb ci: close issue as not planned if no label added (#389)
f7829ddf548a kernel,docs: resukisu.github.io -> resukisu.org
9d0ff6aea9e2 manager: update translations from Weblate (#370)
0b5efe9e0102 chore(license): rename LICENSE_icon_简体中文 to LICENSE_icon_SC (#381)
aa7c82a7f5b5 chore(license): add icon license and update license references (#380)
738b01a81521 build(deps): bump log from 0.4.33 to 0.4.34 in /userspace/ksuinit in the crates group (#377)
bef79c339794 build(deps): bump actions/setup-java from 5 to 6 in the actions group (#378)
4a4b30f08391 build(deps): bump the crates group in /userspace/ksud with 4 updates (#379)
b4e5faef6bf4 ksud: reuse ZIP archive and validate module IDs (#376)
3e80ad77258e ksud: call post_ota() only once after OTA flash (#375)
736d9fe8a66c ksud: improve slot info parsing speed
a543d21c5f1c kernel: synchronization the first track_throne of the late-load
82c7f72d6486 build: bump ddk to 20260828, support android17-6.18 (tiann/KernelSU#3663)
83614d892d5f manager: update translations from Weblate (#365)
d5298be49b7e ksud: Fix su identity argument handling (tiann/KernelSU#3659)
419e270b50ad kernel, ksud, manager: Perform umount for webview zygote (tiann/KernelSU#3630)
71fb420de5e9 ksud: support set selinux context in su (tiann/KernelSU#3653)
6f50cba2a391 selinux hide: spoof status page and avd seqno (tiann/KernelSU#3647)
f2ceaddeeecf bot: add warning info of dev branch
4b46b7594915 manager: fix android lints (#369)
25d94debe0ec manager: Do not show Uninstall when in JailBreak
291d92b840c9 ksud, ksuinit: block mkp too
4e1d11c31620 ci: unified lint check
c4c7829fc333 ci: remove build rust std core (#368)
7bb6f0df4162 build(deps): bump the crates group across 1 directory with 7 updates (#366)
f532f18c2198 manager: update translations from Weblate (#356)
4a3785025a92 kernel: always don't unregister in input_hook
03b60f260cce kernel: sync with latest susfs
b2ac2fc8703c kernel: filter kernel modules at load time (#319)
746686390b0c manager: Add option to use Jetbrians Mono when in terminal screen (#341)
ecba913bd072 ksud, manager: change the susfs config persistent switch to susfs manager switch (#354)
93a08ffcbb7d fix(kernel): adapt to backport of 6.6 kernel, fix tiann/KernelSU#3629 (tiann/KernelSU#3632)
d56d3bf099f5 ci: split LKM architecture
cc44ff62d9dc kernel: compat for old hooks
9671b9d11e45 kernel: Handle execveat for new bionic libc (tiann/KernelSU#3639)
75b99e3e2f31 kernel, ksud: refactor sucompat (tiann/KernelSU#3521)
06390a6acbb7 [skip ci] manager: remove values-idn
9918a8dbf164 manager: update translations from Weblate (#352)
cdce8bb8c8bf fix(ksud): Fix buffer overflow caused by android-properties library
c3592697647a ksud: boot-patch-v2: remove redundant security check (tiann/KernelSU#3627)
19edfa86beab manager: update translations from Weblate (#349)
e0a383dae406 manager: load app icons with AppIconLoader and other minimal fixes
d0a8b1159170 manager: SearchBar automatic folding, module card padding and other minimal fixes
8e2b9945b4f8 build(deps): bump the crates group across 1 directory with 6 updates (#313)
f37ca4d8131c script: the standard eol is lf for *.sh
829f61fb008c refactor(ksuinit): Remove meaningless /sys mount (tiann/KernelSU@bc5d544)
faccf4c5edc7 ci: do not upload to telegram when build manager was been called
ceda24ca2bae ci: fix cannot trigger manager build & PR x86 LKM
38343aa70c97 ksud: Use kernel BTF for boot image injection(tiann/KernelSU@4a5f431)
d74beecfe942 ksud: Add boot image LKM injection(tiann/KernelSU@f5a3b5a)
ff3537fe0cef ksud: fix boot_patch no_custom_rc is unused
df7b0baa93de feat: add x64 lkm (tiann/KernelSU#3570)
48aae43c3c91 manager: update translations from Weblate (#337)
823db144f798 ci: fix release x2 (#347)
3b70416f469c kernel: fix handle_sepolicy won't set success_cmd_count in nongki (#342)
4ddbaf43512b ci,script: fix release
a9216b04e29c manager: migrate app to Koin-backed layered architecture (#345)
676be77fd677 build(deps): bump the crates group across 1 directory with 62 updates (#344)
3ef06b0fcb09 [skip ci]docs,ci: drop crowdin
b267ab11af0d Reapply "ksubot: Do not show link preview when send message"
aff9a23feeeb ksud: drop static banner file, use figlet-rs (#336)
ca62a37fc328 manager: update translations from Weblate (#331)
beaaea0eb895 manager: attempt to fix cardAlpha can't config
f56219d2998d kernel: Align signature block parsing with AOSP (tiann/KernelSU#3613)
a70ed67f260e manager: update translations from Weblate (#330)
058cdc931016 manager: update translations from Weblate (#329)
f7be4a53bd39 manager: update translations from Weblate (#325)
bf32b31d2e4c ci: do not push debug build and non-main branch build to telegram & avoid flood control (#170)
b5bc0247b9a5 kernel: revert creds when save allowlist failed (#326)
00efe32f6bfe manager: update translations from Weblate (#324)
6d1aada8ea3e ksud, manager: split anykernel3 flashing's core logic to ksud, and other minmal fixes (#316)
59c99fdf1735 docs: notice switch to Weblate
73533390e6e0 manager: sync translation from Crowdin
d69b7eafa29f manager: sync translation from Crowdin (#299)
ba8cb85b1889 kernel: prevent /system/bin/stub_zygote from being unmarked (tiann/KernelSU#3601)
cf2ecae3621d kernel: register tracepoint handler with minimum priority (tiann/KernelSU#3582)
1929b551efd8 kernel: add syscall dispatcher patching for x64 (tiann/KernelSU#3562)
88dbc78682a3 ksud: don't panic on a broken zip in get_zip_uncompressed_size (#302)
c2c8f2cc7261 ksud: ensure spawn_sulogd don't return in child; execute /proc/self/exe instead of resolving executable path (tiann/KernelSU#3583)
18c963a195d1 ksud: resetprop: validate timeout value (tiann/KernelSU#3608)
6f8ac88cdf19 kernel: fix compat for honor 4.14 kernels
d5ba3d2d51a4 ksud: validate lengths when loading module config (#310)
e90ca4b0a761 kernel: check allocations in add_filename_trans (>= 5.7 path) (#301)
d89984d3feb7 kernel: free uid_data on malformed line in do_track_throne (#307)
6b66c79b47ac kernel: check kernel_read() results when verifying the APK signing block (#305)
0b4f56fd92bc manager: disable wrapping and ellipsis for navigation bar labels
c84d3f64e4a3 manager: refactor allowlist restore and status synchronization
b0b73beb2434 manager: support selecting uname from boot slot info in susfs screen
6d72abbf6b8f ci: fix upload telegram (#298)
042d59ec1332 kernel: compat for huawei 4.9 kernels (#296)
8d2db27508bb ksud: delete unnecessary decompression parts
5e93c29db90b ksud: multi-thread to analyze boot
ab557d6cc5ce ksud: fix directly write log to stdout
b0fd20a84dcb manager: sync translation from Crowdin (#292)
e00c72a51d16 manager: add baseline profile and move module update checks to background
c9a9d112196d ksud: rename communicate to susfsctl
bb223878170c ksud: nuke all re rules for susfs
51477c3e8b29 manager: fix background blur
97163bdc8ad2 ksud, manager: rewrite susfs screen & susfs management (#206)

git-subtree-dir: drivers/sukisu
git-subtree-split: 3576e6a5255fc880c00f6a3175d89268a6d942be
Hanhanawa pushed a commit to Hanhanawa/BakaSU that referenced this pull request Oct 3, 2026
@5ec1cff @AlexLiuDev233
ksud: support set selinux context in su (tiann/KernelSU#3653)
b6692ac 
[cherry-picked from upstream commit tiann/KernelSU@dab9430]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
rzlamrr added a commit to rzlamrr/flop_trinket-mi_kernel that referenced this pull request Oct 3, 2026
@rzlamrr
Squashed 'drivers/kernelsu/' changes from 194a4d053..3b1e46b04
f80bd51 
3b1e46b04 ksud: enhance risk detection logic
9f20db6d5 manager: add risk detection toggle in Developer screen
ba4b8db45 fix(kernel): Fix avtab removal length calculation and xperms update
85171fb99 feat(ksud): add timeout for boot stage scripts (tiann/KernelSU#3797)
faf4165e0 chore(ksud): make clippy happy
2b31f7185 manager: Check secure screen lock when enabling App lock
c61d87648 ksud: ability to disable and enable  module risk detection
01941e66f manager: remove haptic toggle and make it always enabled and take isNavBarEnabled out of scrollstate
32e897e20 refactor(ksud): update waitsys and refactor logic (tiann/KernelSU#3755)
4bc78d770 kernel: Add Android riscv64 support with LKM (tiann/KernelSU#3750)
5475843a4 manager: optimize the hell out of homescreen to get rid of the long lasting irritating transition lag
c3a0f19df manager: feat: Haptic feedback
a19ea4f51 manager: Add option to disable Nav bar
94b8c49a4 manager: feat: App lock
e4bf775aa fix(manager): pass format args to UAPI version warning strings
1905f41ec fix(ksud): use waitsys to wait when soft reboot (tiann/KernelSU#3754)
c6f3978e6 kernel: fix RCU-protected SELinux policy access (tiann/KernelSU#3746)
d3c68954a fix(ksud): wait for service death before post-fs-data when soft reboot (tiann/KernelSU#3744)
3359e8230 fix(manager): Prevent exception if no root access (tiann/KernelSU#3741)
f58d79fbf workflows: release: Rename LKM artifacts
cd1694d82 workflow: update build-manager to remove stable branch triggers and adjust upload conditions
d223f1fcb workflows: release: Fix LKM artifact
81b851a25 kernel: fix avtab iteration macro (tiann/KernelSU#3701)
c90e64005 kernel: util: wire up ksyscall (tiann/KernelSU#3742)
1a879d6a8 manager: add custom animated splash screen
f6905d5ca manager: remove 'uapi_mismatch' string from multiple language files
ab6e2b1a5 manager: remove 'select_language' string from multiple language files
0f9553a63 New Crowdin updates (#1506)
be220ff68 fix(manager): ensure modules_update exists before restoring (#1518)
90f1134e5 fix(manager): SuperUser screen crashes when accessed too early (#1529)
a951768d0 fix(kernel): Miscellaneous build errors in syscall_hook_manager and arm64 patch_memory (tiann/KernelSU#3738)
893103172 fix(kernel): open file without touching fsnotify and atime while scanning manager apks (tiann/KernelSU#3733)
e332150da manager: remove unnecessary native code for unrooted (#1525)
a9f76ce7c build(dep): ksuinit: migrate dependency to new repo
519be2c07 manager: auto-detect zip kind instead of two separate entries Opening a zip now auto-detects whether it is an AnyKernel3 package (root-level anykernel.sh) or a regular module zip:
6040ba5e8 manager fix unrooted state initialization in settings screen
e9f2356fc fix: WebUI file operations always returning false on success (#1439)
146455c1b ksud: add JSON app-profile get/set commands (#1515)
7409bd36c manager: differ export logs on rooted vs unrooted (#1508)
0f01a3981 docs: update READMEs
ac5de08b7 fix(actions): Remove setup-android
9c1911c14 build(deps): migrate dependencies to new repos (tiann/KernelSU#3723)
f9a69951d kernel: retain capabilities across execve for non-root profiles (tiann/KernelSU#3710)
16ee78192 manager: use in-app language picker (#1492)
fb3643fc0 ksud: risk: fully modularized risk functions, improved output and fully optimized the core function
76dbebf42 ksud: risk: do online evaluation to get the latest cache
bb5552422 ksud: risk remove entry for false flag
917df670d ksud: risk: removed irrelavant modules that arent really risky in terms of functionality
b93da6492 ksud: risk: add new extreme risk entry
8df4d9cbc ksud: improved risk detection logic and reasons, adde severity index and allow module install continuation for low to medium severity risk through user confirmation
85b700532 ksud: add new patterns for risk modules
a161d0bcf fix(kernel): Reject all signature block id except v2 (tiann/KernelSU#3700)
1b2316be3 kernel: selinux: Bypass dynamic wrappers conditionally
e0a77599b userspace: ksud: improve risky module blocker parsing, verbose and added reasons
88feb688d feat(resetprop): support update long value for ro props (tiann/KernelSU#3696)
1fb72a604 blocklist: add fateh7 to blacklist (#1496)
46cc00731 userspace: ksud: add malware/suspicious module detection
7b5541098 scripts: ksunextbot: Truncate message and set error return code
e801e16b5 feat: new version matching detection mechanism (tiann/KernelSU#3516)
8b9d7a7a9 kernel: Support out-of-tree builds against generic Linux
2482c5695 fix(kernel, uapi, ksud): make fd wrapper work with app profile (tiann/KernelSU#3679)
c294278e5 feat(ksud): Implement SIGSYS handler (tiann/KernelSU#3677)
fb4f0a6e9 New Crowdin updates (#1482)
39ba38217 manager: remove arabic translations due to malicious activity from crowdin
36aa55c52 fix(kernel): Preserve a ebitmap's size for each policy type (tiann/KernelSU#3680)
5e6f14533 refactor(kernel, ksud, manager): Switch webview zygote umount to allowlist (tiann/KernelSU#3666)
76d065734 docs: update version references to 3.3.0 (tiann/KernelSU#3667)
835db2823 build: bump ddk to 20260828, support android17-6.18 (tiann/KernelSU#3663)
d47ac9924 fix changes in 6.18+ (tiann/KernelSU#3480)
56ec8a67f ksud: Fix su identity argument handling (tiann/KernelSU#3659)
adfb465b1 manager: Chinese: Fix duplicate (settings_webview_zygote*)
55826561a New Crowdin updates (#1371)
0557d9510 refactor(kernel): Perform umount for webview zygote (tiann/KernelSU#3630)
8ab6aa025 selinux hide: spoof status page and avd seqno (tiann/KernelSU#3647)
9076090d2 feat(ksud): support set selinux context in su (tiann/KernelSU#3653)
bdde17c3a kernel: init: Trim a few empty lines (kernelsu_init)
47daef844 fix(kernel): adapt to backport of 6.6 kernel, fix tiann/KernelSU#3629 (tiann/KernelSU#3632)
8f77a4019 fix(kernel): Handle execveat for new bionic libc (tiann/KernelSU#3639)
0b375cee4 refactor(ksuinit): Remove meaningless /sys mount
234f6e040 refactor(kernel): Drop v1 signature verification (tiann/KernelSU#3628)
0bf23f23c ksud: boot-patch-v2: remove redundant security check (tiann/KernelSU#3627)
272bd6e0f ksud: Use kernel BTF for boot image injection
86e8e246e ksud: Add boot image LKM injection
36874077d fix(ksud): Fix buffer overflow caused by android-properties library
a91a5cce4 kernel: apk_sign: Format a few spaces to tabs
1c37600b6 refactor(kernel): Align signature block parsing with AOSP (tiann/KernelSU#3613)
18c790e79 ksuinit: compat for version magic mismatch kernel (tiann/KernelSU#3584)
444f8413f workflows: ksuinit: Remove explicit build package (x64)
b1b0f0e65 kernel: sulog: Add include (linux/init.h)
d2e04179f workflows: Update checkout/upload-artifact to v7
4c18cfdb3 feat: add x64 lkm (tiann/KernelSU#3570)
e7536f02c ksud: resetprop: validate timeout value (tiann/KernelSU#3608)
7e237c869 kernel: prevent /system/bin/stub_zygote from being unmarked (tiann/KernelSU#3601)
9781f9bb2 manager: instead if hiding kernel features lets make them disabled if not supported
38791da11 kernel: check kernel_read() results when verifying the APK signing block (tiann/KernelSU#3594)
d6a42fd92 kernel: add missing NULL checks on allocation paths (tiann/KernelSU#3572)
a124ae5f1 ksud: ensure spawn_sulogd don't return in child; execute /proc/self/exe instead of resolving executable path (tiann/KernelSU#3583)
d5874c5a3 manager: fix stray quote corrupting saved app profile templates (tiann/KernelSU#3571)
1d4f72c89 kernel: register tracepoint handler with minimum priority (tiann/KernelSU#3582)
706413e0d manager: add module metadata in confirmation dialog
8fb0a6e44 ksud/ksuinit: Silence build warnings
dfa73f1bf chore: make clippy happy (tiann/KernelSU#3574)
cd1cb09f6 kernel: add syscall dispatcher patching for x64 (tiann/KernelSU#3562)
d1754d8cc ksud: boot-patch: only use kmi from boot if ota (tiann/KernelSU#3557)
3b18216f7 New Crowdin updates (#1366)
910a46004 manager: add pull to refresh for sulog screen
8c363a144 manager: fix sulog screen drowndown menu
d7d33d5b2 New Crowdin updates (#1342)
d63ba75fd manager: optimize and fix sulogscreen and other screens
1cbad7e2a manager: optimize and fix sulogscreen and other screens
39b16628f manager: Home: Restore ksuVersionTag
1a0ef4898 ksud: Relax regex for module ID/config key
111170990 [PARTIAL] ksud: expose module env vars (tiann/KernelSU#3522)
64a853cae ksud: update resetprop, improve prop area rebuild (tiann/KernelSU#3545)
7bce6ea5e manager: Chinese: Fix empty reboot_userspace
012a3f407 ksud: Adapt resetprop calls to prop-rs-android 0.2.0 (tiann/KernelSU#3532)
9e29205ed ksud: update dependencies
30802e726 kernel: Remove strncpy() from the kernel (tiann/KernelSU#3529)
0608dfd71 manager: Fix MissingFormatArgumentException for home_working_version
fe1b65b28 manager: Spanish: Fix malformed require_kernel_version
065a36ae6 kernel: Allow domain to use memfd created by ksu domain (tiann/KernelSU#3528)
54c736794 kernel: Add compat bridge for ksu_toolkit (SULog)
a7152225c kernel: kernel_umount: Format a few spaces to tabs
a97004c79 kernel, ksud: refactor sucompat (tiann/KernelSU#3521)
e1bcbb270 dev: split output dir for local lkm build
3b917c954 dev: remove and ignore kernel/.clangd, add clangd examples
bc89ec9b1 manager: fix template save & load (tiann/KernelSU#3517)
1c1cdff36 ksud: su: add --ksu-no-new-privs option (tiann/KernelSU#3515)
9ef07896a kernel: allowlist: Format/indent spaces/tabs
8426b72fb feature: add KSU_NO_NEW_PRIVS (tiann/KernelSU#3509)
e1f4fec90 kernel, ksud, manager: implement uapi version (tiann/KernelSU#3455)
d3e454f68 kernel,ksud: support module-provided init.rc injection (tiann/KernelSU#3478)
ae00b2902 chore: make clippy happy (tiann/KernelSU#3423)
dd4c7a6c5 userspace: improve module loading and ksud CLI (tiann/KernelSU#3406)
7c903c95c ksud: add --kmi for ksud late-load
f4ea5c2fb ksud: fix fmt and clippy
e13b12361 ksud: fix daemonize
b536bc870 ksud: minor refactor (tiann/KernelSU#3377)
f55f9fb9b ksud: add manager package name option to some commands
c57be459d ksud: remove ksud before update it
ec9359bf4 fix: add CORS header to ksu://icon/ responses to allow programmatic image loading (tiann/KernelSU#3402)
dab1dbc46 manager: simplify sulog parser
e6d9fa18f manager: fix sulog string
35b8d7c34 manager: add sulog screen (tiann/KernelSU#3373)
dfd8846eb kernel: Fix building sulog on kernel 6.1 & x86_64 (tiann/KernelSU#3401)
cdeec0d18 kernel: sulog: fix return value (tiann/KernelSU#3364)
4a6e23795 feat(kernel ksud): add sulog (tiann/KernelSU#3360)
bf8a14e80 Revert: feat(kernel): tiny_sulog
444107588 New Crowdin updates (#1245)
f1b64f440 kernel: Improve late load mode sequence calculation (tiann/KernelSU#3498)
c2013a15a selinux_hide: hide status (tiann/KernelSU#3495)
af303ac7c ksud: update android_bootimg and preallocate memory for patching
8e98b5d4c refactor: use built-in bootimg crate, remove magiskboot (tiann/KernelSU#3467)
4c5305b39 manager: strings: zh-rCN: Re-order SELinux Hide feature placement
ec3446e82 manager: Re-order AVC Spoof feature placement
18f9334c4 adbroot: support statically-linked GetProperty (tiann/KernelSU#3470)
5f905f64e [PARTIAL] kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390)
e2538f491 kernel: don't call path_put when kern_path failed (tiann/KernelSU#3410)
7542b2d16 manager: adb_root: load our ksurc if possible (tiann/KernelSU#3412)
39ec9e4d8 kernel: fix path check in adb root (tiann/KernelSU#3391)
f0e03aa96 feature: adb root (tiann/KernelSU#3382)
7a3bda171 kernel: symbol_resolver: resolve symbol suffix starts with '$'
d591e7d98 ksud: fix some module scripts won't add KSU_MODULE environment var (tiann/KernelSU#3445)
f14bf978c ksud: su: support parsing arguments after user (tiann/KernelSU#3464)
5993c8ea6 ci: disable cache-bin in ksud-extra to fix macOS build (tiann/KernelSU#3463)
8b9a9f885 kernel: Prefer hashed .cfi_jt variants before bare symbols (tiann/KernelSU#3475)
4d5ba9875 kernel: refine symbol_resolver (tiann/KernelSU#3469)
1ae6aad75 kernel: Resolve dotted CFI symbol variants in symbol lookup (tiann/KernelSU#3461)
5a4a71874 selinux_hide: fix attr/current detection (tiann/KernelSU#3459)
65a24e11b feature: selinux hide (tiann/KernelSU#3457)
4c9737aed kernel: simpler implementation of copying policydb (tiann/KernelSU#3350)
c2e1a7cce kernel: init: Format a few spaces to tabs
f08381731 feature: allow shell & force enable adbd (tiann/KernelSU#3298)
293ca016c kernel: prune redundant avtab nodes after deny rules (tiann/KernelSU#3439)
2887ea494 manager: add conditional info for zygisk and meta module
f81f73afd manager: rework gesture navigation logic with full-featured condition
105c40a2f manager: add sorting options for module stars in ModuleRepo
86f49b410 manager: allow module install in safe mode
aa9154952 manager: added seccomp status
a7769b359 manager: improve and refactor meta and zygisk implementation info
aefac0d48 manager: ksud: refactor zygiskImpl and Metamodule info and made the info simple and lite (detailed info will be back in the future with better implementation)
e6ba52b72 manager: partially fix home screen stutter caused by getzygiskimplementation function
4e4c40be9 manager: simplify developer options state management in ModuleItem
8c1b4a926 manager: module card conditionally expand based on developer options
8d363c437 fix include change (tiann/KernelSU#3428)
81f88298c manager: refactor getZygiskImplementation
584590e06 workflows: build-manager*/ksud/release: Update download-artifact for ksud (v7)
0daf55582 kernel: allowlist: Format a space/tab to a tab/space
ddeecfd4c kernel: refactor allowlist (tiann/KernelSU#3418)
551ad8047 manager: add gestures for naviagtion
4c387be48 manager:add contributors card
56e76e282 kernel: Replace GFP_ATOMIC flags in throne tracker
982f46940 kernel: Fix OOB read caused by missing null terminator
77d5b30cb userspace: ksud: susfsd: Add a return code for programmatic use
fa5e1c547 userspace: ksud: susfsd: only print error instead of return it
9d0b2be4e userspace: integrate susfsd into ksud
6df403db0 workflows: build-manager/manager-ci: Create x86_64 path (app jniLibs)
095f780bf manager: fix navigation for shortcuts
c21acbad5 kernel: supercall: Use strscpy for CHANGE_SPOOF_UNAME
2cd86fb79 manager: webui: Add WebUI BackHandler Support
27a60b6e9 manager: Update min. supported kernel version (33110)
c64488ef0 userspace: ksud: Add x86_64 passthrough
b5f34deee userspace: ksud: Ignore built susfsd
c7ce61491 userspace: ksud: Re-generate Cargo lockfile
4dc22a4fc kernel: Don't advertise webview zygote in umount list (tiann/KernelSU#3389)
1610aee76 kernel: mark more functions as init/exit functions (tiann/KernelSU#3380)
30a29de89 ksud: Change uid references to appid (tiann/KernelSU#3388)
01d825440 ksud: sepolicy: fix *xperm parsing, support bracket for perm_set (tiann/KernelSU#3353)
d8d24c1e1 kernel: bump app profile version, migrate selinux domain (tiann/KernelSU#3363)
ab5d93d9b kernel: move selinux context to ksu
bbdfbd246 syscall_hook: Fix building on kernel 6.6 and below (tiann/KernelSU#3383)
2cb3c91b4 kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390)
0f9cceae3 kernel: Fix extmod config propagation for manager/policy/debug
d96e8dbd0 fix: GKI kernel build
91e4c0090 kernel / userspace / manager: fix uapi
32abc191a kernel: unified uapi header
c7c13e037 kernel: Format a few spaces to tabs (sucompat)
0f42a22ae kernel: sucompat: fallback to sh when ksud is unavailable
e782e290b kernel: fix lsm hook
8d16c2221 kernel: common symbol resolve tool
c35685aa0 kernel: add lsm hook framework
fa5c0f0bc kernel: allow disable manager or policy
6d4aa8bfc kernel: reorganize source layout
cb559258d New Crowdin updates (#1174)
140e9c80e ksud: add debug insmod
d41dc4be5 ksud: late-load: reopen fd to reset selinux file context after LKM loaded (tiann/KernelSU#3354)
462182fa7 kernel: selinux: minify rules
41d6e81cf kernel: fix copy avtab (tiann/KernelSU#3352)
622036b34 kernel: fix compile for x86-64 linux kernel v6.13- (tiann/KernelSU#3351)
426d9a64c [PARTIAL] ksu: drop official x86_64 support (tiann/KernelSU#3316)
c8204e6a7 kernel_umount: fixup printout and avoid UAF (tiann/KernelSU#3338)
748fe0eab userspace: Fix WebUI root shell cgroup escape
690042684 ksud: fork daemon to run late-load mode (tiann/KernelSU#3334)
e5910e8a3 feat: ksud-managed emulated soft reboot (tiann/KernelSU#3291)
cd424a198 manager / userspace: Add soft reboot (setprop; zygote)
6e4be1931 kernel: handle ksud execve by syscall_hook_manager, use static_key
0081da96c kernel: remove usage of get_current_cred
2e945fa53 supercall: perform free_pid() calls for kernel 6.15+ (tiann/KernelSU#3331)
ac5bb5d6c kernel: allow exit
93d56b356 feat: safe exit (tiann/KernelSU#3317)
9707560bd [PARTIAL] Bring back x86_64 support with a catch (tiann/KernelSU#3328)
7e1401e07 kernel: Format a few tabs to spaces (supercalls; syscall_hook_manager)
e05540f4f kernel: use syscall table hook to avoid running in atomic context
7bb9d00ab feat: support switch to init_group (tiann/KernelSU#3322)
4cfb2a188 ksud: refine resetprop cli (tiann/KernelSU#3330)
80c081181 update prop-rs-android & resetprop
5380d17cf ksud: embeded resetprop impl (tiann/KernelSU#3300)
326d35396 manager: Update min. supported kernel version
dd808f86c [PARTIAL] feat: jailbreak by Magica (tiann/KernelSU#3268)
ca8295ad2 kernel: fix process marking for built-in mode (tiann/KernelSU#3284)
31668a6cd New Crowdin updates (#1166)
2c901a93e ksud: refine boot-patch (tiann/KernelSU#3281)
6d662163d Update KSU config to require EXT4_FS (tiann/KernelSU#3266)
d3cb4403e kernel: Fix RLIMIT_NPROC leak on root escape (tiann/KernelSU#3286)
bf36fbbb1 kernel: upgrade ddk, use ddk-min (tiann/KernelSU#3280)
95f4378f0 kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)
4693f14b7 kernel: enforcing selinux at late-load mode
948f47715 feat: add late-load mode support (tiann/KernelSU#3258)
1425864dd manager: fix padding for module screen
71363abb0 kernel: refine stackprotector workaround (tiann/KernelSU#3264)
fa060a8ae kernel: make clang-format happy
6e112b77c kernel: Only check CONFIG_STACKPROTECTOR_PER_TASK on arm64 (tiann/KernelSU#3263)
271b2be15 kernel: add missing attribute
6a04abc6f kernel: Provide own stackprotector symbol if necessary
d4ff3e20a New Crowdin updates (#1164)
bee5000d7 manager: fix navigation for superuser and module destination buttons
690c5a010 manager: improve navigation route animations
d2866a623 manager: refactor navigation route for navbar and save state for destination
7ccc5dd1b manager: refactor settings screen
bedfb626f manager: improved padding for column and snackbar
b4434f973 manager: fixed bugs and improve backup and restore
ed7515a03 manager: disable toggle when module uninstalled
947edfe6b manager: remove dead strings
9aac87ab8 manager: minor tweak to strings
44a68e8db manager: removed hardcoded string
6ac83131e ksud & ksuinit: fix wrong GetInfoCmd struct (tiann/KernelSU#3256)
9034d6cf2 manager: add new string
613e333ef New Crowdin updates (#1157)
de4ecb778 manager: refactor and improve module/allowkist backup.restore
565b4649f manager: minor tweak to statuscard
d7d2161ac manager: tweak a string
e1d5e1d34 manager: flipped the toggle state of sucompat, avc spoof and kernel umount
b34be75f4 manager: bring back susfs info userspace: bring back susfsd
da897dec9 manager: some small ui improvements
117af6325 Revert "ksuinit: ignore has_kernelsu and load kernelsu module overriding in-built kernel driver"
8e12bfb7a manager: New Crowdin updates (#1155)
1112651be manager: clean translations for newer ones
95f42b5c9 manager: fix some warning
ff1eef21c manager: add stars count for module and meta repo and some improvements
598c11eb5 manager: added dynamic and improved shortcut icons
9534e710b manager: added pull to refresh for module repo and meta module repo screens
077a76b04 manager: fetch superuser and module lists from main activity instead
e566750a2 ksud: support patch cmdline
b3920c81e kernel: Use ksu cred to save allowlist (tiann/KernelSU#3243)
4855fa3a8 manager: add confirmation dialog for anykernel zip flashing
498ad0e30 manager: remove kpatch-next hardoced shortcut and hidden launcher
6fb44f009 kernel: Avoid malloc in remove_uid_from_arr() (#3099)
56074f8f4 kernel: use rcu to access allowlist, refactor get allowlist api
5282df73b manager: module card and supercard in homescreen is now again a destination button
66ca82356 manager: remove custom colors for update text
64e6797f0 manager: refactor createShortcut method to use module name and webuiIcon same as module screen
3a5b1a37a manager: refactor manager update downloads to allow variant selection  (main / spoofed)
ce31df039 manager: expose shortcut js interface api to webui
1acb912fb manager: refactor module shortcuts, now supports all OS and  auto fetch icons for shortcuts )actionIcon, webuiIcon)
8a8c3b71c manager: add selinux permissive toggle
b0aa292b1 manager: added top p[adding for  home and settings screen
134d8de62 manager: make kernel umount, avc spoof and sucompat toggles persistent on reboots
738be77ac manager: make superuser items a card
d2a4a9944 manager: fix strings
37b608e8e manager: use separate interaction source for switch item
d9fc2f083 manager: fix padding for settings card
95221f385 manager: add banners for meta module repo card and improve size of install button
bada46a9d manager: add banner for module repo
1cbfc8408 manager: add non-free module repo toggler
bf2430b93 manager: ability to add more than 1 repo
ca29917ed feat: load module banner on newly installed modules (#1129)
4868b7850 Update Home.kt
26d7f4766 Update strings.xml
6ab4a99cf manager: fix some colors
000852fe2 manager: removed ksu_toolkit and zygisk shortcuts
e002435ad manager: optimize destination route and fix navbar button highlights for non nabvar destination screens
b541ec689 manager: prevent duplicate navigation to Home in NavBar
3769b42d3 manager: fixed navbar & shortcut destination route
e771de703 manager: refactor nav route animations
e1b511d01 kernel: Kbuild: Remove duplicate extras.o
e7e293c88 kernel: use correct errno when add_try_umount failed (tiann/KernelSU#3212)
6aa18400f manager: back to home page first
cf8b3a8a2 manager: don't enforce predictive back gesture
314fbc5a2 manager: add license info label for module repo
fa2035d74 manager infocard now collapseable
ca8e56e0e manager: make the navbar size better dynamic depending on screen sizes/dpi
95c2d2282 manager: adjust navbar shape
1760b5f1d manager: fixed navbar padding for snackbar
51c8f77ec manager: add visibility parameter for module repo json
c7603568c manager: add a-z sorting and search button
ad1a88606 manager add custom repo links
99d4ae98a manager changed refresh button icon
fbdc23bcb manager: remove unnessary onsync button, now poull to reffresh fetches online templates too
11e4b1d77 manager: remove floating action buttons and added the action to topar
58faf4ebc manager: implement hide and reveal floating navbar on scroll
cadc1b0d8 manager: fix padding for navbar items
63868c72d manager: improve floating navbar size
304c1a1cb manager: add jelly transition for floating navbar buttons
6501accc4 manager: implement floating navbar
56006c50c manager: integrate module repo into module screen
ec215a2fc kernel: Fix `setup_selinux` using `__task_cred` directly (tiann/KernelSU#3189)
fe1fb51bf manager: add flash anykernel intent
70a274998 manager: add module/action shortcuts
ec1784370 manager: add fileOutputStream interface to WebUi
26ff5aeee manager: load module list from online repo json
699d513af manager: add essential tool install screen
d86d45bc8 manager: add meta module install screen
cfaa5d663 manager: turn screen off first before rebooting to recovery
a32cb83c6 kernel: Fix potential memory leaks (tiann/KernelSU#3170) (#1082)
5ce30b065 manager: support install lkm by flashing apk in recovery
ab7b99e34 kernel: fix bad pointer dereference for uname spoof
2567adae7 manager: slight improvements to module screen
0098eea89 kernel: supercalls: expose spoof uname function to userspace
ecd489bbe kernel: improve Git repository detection for KernelSU versioning (tiann/KernelSU#3108)
5da83f740 kernel: Prune legacy (4.x) support (#1072)
9b6c22b49 kernel: Use more reasonable symbol name for newfstatat
81cd9e8bf kernel: Fixing symbol names causing x64 kernel compilation failure (#3147)
d8dbb7b16 Add Dynamic Shortcuts and Refactor Static Shortcuts (#1067)
e822400c6 kernel: ksud: Refine rc injection, fix issue of Android Canary 2601
cacd27e53 ksud: Update resetprop from Magisk v30.6 (#3144) (#1065)
8de61e230 kernel: Clean up selinux.c (tiann/KernelSU#3132)
8112c52b3 manager: hint kpnext launcher
be503e2b2 manager: true edge-to-edge support
ef7c36a80 manager: add KPatch-Next webui shortcut for ksun icon in homescreen
333bb622f manager: improve fetchAppList
df4dc6b5e Revert "manager: redo fetchAppList onCreate"
f97c6762b manager: redo fetchAppList onCreate
ad22de915 kernel: check package name before check manager signature (tiann/KernelSU#3134) (#1052)
56879181a selinux: Cache SID lookups for domain checks (tiann/KernelSU#3128) (#1051)
8a61e8a84 Update AnyKernel3 Flashing logic and logging (#1045)
81dc3fa9b kernel: extras: avc log spoofing
a30c086e6 kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038)
f6a07575a Merge pull request #1035 from pershoot/dev1
abddb91c0 kernel: fix Wcalloc-transposed-args (tiann/KernelSU#3121)
ae76a3c55 manager: removed global namespace toggle
f1aedff26 kernel: supercalls: expose ksuver override
42e6e4a5c manager: fix anykernel selection bug
36eb7e50a manager: expose anykernel flasher for non-gki devices
0968ef549 ksud: manager: fix unresolved crates and sync with upstream
51b66579b kernel: Ensure manager is valid before installing fd (#3115)
022030192 kernel: use selinux_cred() method instead of directly use cred->security (#3111)
7ed598539 manager: fix all warnings
90cb7d2e3 ksuinit: use upstream (#3095)
b03d21cd5 ksud: update dependencies (#3096)
ae238d1c9 manager: add module donation button
2bb9ace01 manager: add anykernel3 flashing support
f832368d6 kernel: bumping fallback ksu_version  to  avoid bad integer value for userspace
a93546acf workflow: combine normal and spoofed manager build in a single workflow
81c604ada kernel: append to init.rc instead of prepending to atrace.rc (tiann/KernelSU#3107) (#1017)
a630cd8f5 manager: refactor getZygiskImplementation
3e141e6af manager: determine partition recommendation for patching based on kernel version instead of android release suffix
93e37eda1 kernel: Update build setup (#1010)
0a05bd212 manager: better working mode status
2031a08d7 manager: show superuser app uid with dev options
56471673e kernel: supercalls: allow userspace to pull list entries (tiann#3040)
83a45a356 sulogv2
08dab4640 ksuinit: update dependencies and migrate to 2024 (#3088)
7fc17d05b kernel: fix kvrealloc compatibility (#3089)
d01726550 kernel: use kvrealloc
8a03b707f manager: fix app icons not loading in webui-next
1e8e3f05e kernel: adjust ioctl IDs to avoid future ioctl conflicts
b3f15f277 manager: add webview padding if no request from insets css (#3083) - Also expose ksu.enableInsets() for js to enable/disable webview insets. - Since not all webui support insets, insets now is disabled by default, but if web request resource from `internal/insets.css`, insets will be enabled once automatically. - No changes are required for current WebUI. This makes insets feature fully opt-in only, web that doesn't support inset will not be affected anymore. - Usecase: if a webui want to use inset, it can request insets css at first, but if it want to load external webpage in current window afterwards then it can use ksu.enableInsets(false) to disable insets.
3b5f477ca kernel: Allocate fake struct on heap (#3081)
43287bda1 manager: Remove androidCmakeVersion
bce771bbd kernel: release seccomp filter (#3077)
11695a116 kernel: setuid_hook: Remove unused includes and function (#3072)
c0944eb47 kernel: Refactor file_wrapper (#3070)
b606f0ab8 manager: add better nesting for toggles of supported features
c1f113e86 manager: fix enhanced security toggle state  being inverted
66af7707b manager: add avc spoof toggle
52b7fc033 ksud: add avc spoof to feature
bc3763763 kernel: extras: add avc spoof impl
c298676e9 manager: fix and improve intent handling to avoid creating new instances
b8db8c849 manager: add meta module implementation name and version
f1ef1bdbc ksuinit: ignore has_kernelsu and load kernelsu module overriding in-built kernel driver
0041fe576 manager: improve settings screen
6115d8e95 manager: refactor amoled mode to take effect immedietly instead of restarting activity
899f900cb kernel: fix check format again (#3071)
872e1b8de kernel: fix root_groups defs (#3028)
8490b4655 Add mount namespace support 添加挂载命名空间支持 (#2909)
185362fe8 manager: improve exit and enter transition animations
2de3c864e manager: improve restart function to avoid activity crash
9b7c1e4ff Merge pull request #936 from fatalcoder524/add-shortcuts
f9fe9f6df kernel: supercalls/debug: expose ksu_set_manager_appid to sys_reboot this is for debug and testing, this is locked to uid0 only anyway so I dont see issues.
5dc52a42c manager: implement new method to get manager app uid (fix developer mode crash)
c5d2b28c9 kernel: sulog: basic ringbuffer su log
65e226e79 manager: add zygisk impl  module indicator label item in module card
cfa949a16 manager: add meta module indicator label item in module card
7bcd00675 manager: fix tertiary label item color combination on amoled mode
2277612dc src: removed more unused files
0829cb503 ksud: add back KSU_NEXT variable to scripts environment
ca24c0d21 manager: fix applist fetching twice causing a crash if spammed open and close
ec05b5c4c manager: bring back module restoration from backups
df2ce803c remove some unused files (#3034)
e27687f35 ci: Correct the file paths checked by clang-format; change trigger path in clang-format workflow (#3063)
da81be97c kernel: reformat codes, add workflow to check format (#3062)
0ee37f60e ksud: Decrease log level on release build (#3058)
1b626e5a2 kernel: Install manager fd in task work (#3057)
1e119d30f ci: move ksuinit build to a single workflow (#3054) - This allow ksud-extras to include ksuinit. - Remove x64 ksuinit since there is no lkm for x64.
365ad88a9 kernel: Use GFP_ATOMIC for atomic context (#3052)
919953e98 kernel: Identify manager without PER_USER_RANGE (#3038)
3ad5286f5 ci: Fix cargo deps
1d81eca42 ci: Run rust checks for ksuinit and fix them
e4d02c8dd ci: add ksuinit (#3026)
d837b01cb kernel: use $(CC) for check_symbol target (#3041)
ce3a89c8a kernel: check lkm symbols (#3035)
f8df04342 kernel: use our cred to unmount, remove sepolicy of zygote (#3032)
084152e93 support kernel 6.18 (#2999)
37e48432e kernel: escape to ksu domain in execve hook, remove sepolicy between … (#3031)
84a0506da kernel: Remove sepolicy of kernel domain
50968fe52 ksud: more verbose log (#3021)
36075e36a kernel: Remove second stage init handling for old system
8ccbd93bc ksud: Add process info in bugreport (#3014)
cc31437d1 kernel: Move kernel part build rules from Makefile to Kbuild (#3003)
8a7495108 manager: fix webui load indefenitely if app list is not initialized (#3012)
edf8e48e4 workflow: always sign manager
REVERT: 194a4d053 kernel: hook: add app_profile.h include to hook_manager.
REVERT: 3589903a0 kernel: hook: rename syscall_fn_t to ksu_syscall_fn_t
REVERT: 536f9cfdb kernel: util.h: add ksu_sys_unshare macro for > 4.17 kernels
REVERT: 3b0ed1671 legacy: sepolicy: port add_rule_raw bool error propagation from dev
REVERT: f14c77acc legacy: Kbuild: derive version from commit count (drop +200 offset)
REVERT: 30b65314c fix(selinux_hide): don't reject every app-uid security_check_context write
REVERT: 48972b9d9 kernel: port dev branch features to non-GKI legacy layer
REVERT: 65571d435 uapi: sync ABI to dev branch (keep #define style for legacy toolchains)
REVERT: dd074bc6c Kbuild: Fix missing replacements in hooks.c (#1425)
REVERT: 9b36ff0f3 kernel: selinux_hide: rework non-functionals in kprobes hook (#1441)
REVERT: f6a1570cc legacy: non-GKI update — execveat (new bionic), hardening fixes, syscall table hooking scheme (#1462)
REVERT: a54e4fa46 kernel: Don't use kprobes if we don't have functional kprobes
REVERT: 53791c92b manager: throne_tracker: fix ABBA deadlock with packages.list rename
REVERT: fcb26cac2 policy/allowlist: implement strscpy_pad fallback for older kernels
REVERT: 7b3fb9835 uapi: convert static const to #define for compile-time constants
REVERT: fd093e8b8 fix: fixing 4.9 compatbility issues (#1385)
REVERT: 07692d96a kernel: purge SuSFS remnants
REVERT: ab2bdab77 Fix compilation compatibility for Linux Kernel 4.9 (#1382)
REVERT: eb139a6de fix: Adding an #if to make compatibility between 4.19 and earlier kernels and 4.14 and older kernels (#1377)
REVERT: 13ad2b4cb fix: sucompat, __init/__exit macros (legacy) (#1376)
REVERT: 430a73921 sync legacy: sulog, SELinux hide, adb root (#1364)
REVERT: 77b30272a [Port] port selinux_hide from dev branch (#1297)
REVERT: fc33995ce Change ksu_kvfree parameter to const (#1210)
REVERT: ff7b3b451 kernel: selinux/rules: Pin task to current CPU to avoid cross-CPU rwlock release
REVERT: c49a6316c fix: backport scheduler header for legacy kernel compatibility
REVERT: 9b08e8886 kernel: sync version code
REVERT: e7c00c828 ignore manager dir
REVERT: 2ab0a0d3e kernel: Replace GFP_ATOMIC flags in throne tracker
REVERT: 798945d0e Revert "kernel: selinux: fix slow path string comparison and remove dead code"
REVERT: b4d0ab28e sync ksu version with dev branch
REVERT: 63e787b2b Reapply "kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)"
REVERT: c757f80de kernel: compat: `strscpy_pad` for kernels <= 4.14
REVERT: 688b13b81 kernel: fallback to preemptible memory read on nofault failure
REVERT: 8eacec77d kernel: ksud: handle newfstat rc size injection
REVERT: de1d32244 kernel: supercall: Use strscpy/strlcpy for CHANGE_SPOOF_UNAME
REVERT: cecdd9ff0 kernel: Don't advertise webview zygote in umount list (tiann/KernelSU#3389)
REVERT: 747fed073 kernel: mark more functions as init/exit functions (tiann/KernelSU#3380)
REVERT: 19944600c kernel: bump app profile version, migrate selinux domain (tiann/KernelSU#3363)
REVERT: 54d514bda kernel: move selinux context to ksu
REVERT: 85f7f1f8a kernel: Fix absolute src handling in Kbuild (tiann/KernelSU#3390)
REVERT: 50069ee01 kernel: Fix extmod config propagation for manager/policy/debug
REVERT: 4a3a0689d fix: GKI kernel build
REVERT: d0dd36c8e kernel: fix uapi
REVERT: 86624a963 kernel: unified uapi header
REVERT: 5f5172f91 kernel: Format a few spaces to tabs (sucompat)
REVERT: 4c9a3c205 kernel: sucompat: fallback to sh when ksud is unavailable
REVERT: 765a69f61 kernel: allow disable manager or policy
REVERT: 813bc8a7e kernel: reorganize source layout
REVERT: 4b95101ef kernel: add missing init_session_keyring variable for legacy kernels
REVERT: 46bb0f058 Deleting this block for kernel 4.9, as it causes a BUG when override_creds  (#1197)
REVERT: f029653f7 kernel: selinux: minify rules
REVERT: 27ef2d2be kernel: fix copy avtab (tiann/KernelSU#3352)
REVERT: d3c01dd83 kernel_umount: fixup printout and avoid UAF (tiann/KernelSU#3338)
REVERT: 6bfa17679 supercall: perform free_pid() calls for kernel 6.15+ (tiann/KernelSU#3331)
REVERT: 0306a23ab feat: safe exit (tiann/KernelSU#3317)
REVERT: d70eebed3 kernel: remove usage of get_current_cred
REVERT: d1e064fbe feat: support switch to init_group (tiann/KernelSU#3322)
REVERT: 09093de75 kernel: Kbuild: align KVER with dev branch changes
REVERT: 1e65e8655 kernel: selinux: fix slow path string comparison and remove dead code
REVERT: a1c38dc5a kernel: compat: resolve mount math bugs, dead code, and memory allocation abuse
REVERT: 5ab39a28b kernel: throne_tracker: resolve race condition in async kworker state
REVERT: 7a26364cb kernel: remove util.c and try_set_access_flag dead code
REVERT: 6ed11562a kernel: hook_manager: resolve spinlock deadlocks and unsafe memory reads
REVERT: 79cfc769e kernel: lsm_hooks: fix race conditions, remove dead code and optimize logging
REVERT: da543ef9c kernel: lsm_hooks: resolve strict signature mismatch and dentry anti-pattern
REVERT: cb1028e7f kernel: app_profile: remove dead mount namespace code
REVERT: 1e162d1dd kernel: supercalls: prevent integer overflow and clean up dead code
REVERT: 5e48884f4 kernel: setuid_hook: untangle preprocessor macros and prevent NULL pointer panic
REVERT: 917775f2e kernel: ksud: prevent atomic panics and fix 32-bit compat in fstat kretprobe
REVERT: bcb08758b fix(ksud): remove unsafe memory access hacks in execve kprobe
REVERT: 1ff11c111 kernel: sucompat: align userspace stack buffer to 16 bytes
REVERT: 916fc4460 kernel: sucompat: safely read execve paths without preempt/access-flag hacks
REVERT: 83dde735e kernel: apk_sign:  Optimize I/O reads in ZIP parsing loop for APK signature check
REVERT: 037e9c006 kernel: apk_sign: Optimize EOCD signature search loop
REVERT: db9eae946 kernel: allowlist: optimize `ksu_get_root_profile` linear scan
REVERT: a9d7764f1 kernel: throne_tracker: fixup deadlocks on iterate_dir
REVERT: 050611872 kernel: throne_tracker: offload runtime tracking to delayed_work
REVERT: 85421904f kernel: allowlist: use workqueue instead of init task_work for saving
REVERT: a587f23be selinux: add compatibility for pre-4.12 kernels
REVERT: 3ef17a5bc kernel: lsm_hooks: prevent VFS deadlocks and optimize permission checks
REVERT: 55b220850 Revert "kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)"
REVERT: 785e0bb6e fix: restore missing LSM init for built-in/manual hooks
REVERT: b44b482b1 kernel: selinux/rules: backport handle_sepolicy to legacy policydb
REVERT: 80bfcb7fd kernel: legacy support for new sepolicy on legacy kernels
REVERT: 942853eed feat: jailbreak by Magica (tiann/KernelSU#3268)
REVERT: 934c15291 kernel: sync KSU_VERSION with dev branch
REVERT: 9a134d03f kernel: fix process marking for built-in mode (tiann/KernelSU#3284)
REVERT: 04b9923fe kernel: Fix RLIMIT_NPROC leak on root escape (tiann/KernelSU#3286)
REVERT: 33349808e kernel: upgrade ddk, use ddk-min (tiann/KernelSU#3280)
REVERT: 6a0712f24 kernel: sepolicy: use GFP_KERNEL (tiann/KernelSU#3271)
REVERT: 9515aa4b6 kernel: enforcing selinux at late-load mode
REVERT: 3bfc56a35 feat: add late-load mode support (tiann/KernelSU#3258)
REVERT: 71e0585c3 kernel: refine stackprotector workaround (tiann/KernelSU#3264)
REVERT: 1cd7fd815 kernel: make clang-format happy
REVERT: 92e845f37 kernel: Only check CONFIG_STACKPROTECTOR_PER_TASK on arm64 (tiann/KernelSU#3263)
REVERT: 3f4eb7dde kernel: add missing attribute
REVERT: 1d79ce51e kernel: Provide own stackprotector symbol if necessary
REVERT: d8fa0fc81 kernel: Use ksu cred to save allowlist (tiann/KernelSU#3243)
REVERT: 8f39f4a16 Revert "kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038)"
REVERT: 1ce19e536 kernel: sync KSU_VERSION with v3.1.0 stable tag
REVERT: ff629805c kernel: Avoid malloc in remove_uid_from_arr()
REVERT: 1a608613b kernel: use rcu to access allowlist, refactor get allowlist api
REVERT: 119b36986 kernel: don't use "reset seccomp filter count when escaping to root" for kernel version <5.9.0
REVERT: fe83b2d09 kernel: sync KSU_VERSION wit dev branch
REVERT: 8174393b3 kernel: use correct errno when add_try_umount failed (tiann/KernelSU#3212)
REVERT: 0a815847e kernel: supercalls: take sulog_init_heap() out of kprobes guard to fix sulog for manual hooks
REVERT: 1fe50d167 kernel: Kbuild: Remove duplicate extras.o
REVERT: 85dde0cde kernel: ksud: Restore init.rc injection for manual hooks
REVERT: 6f532c03e kernel: sync KSU_VERSION with dev branch
REVERT: d77224355 kernel: Fix `setup_selinux` using `__task_cred` directly (tiann/KernelSU#3189)
REVERT: c24b3a1ea kernel: ksud: read: add fallback to /init.rc
REVERT: 57abef815 kernel: improve Git repository detection for KernelSU versioning (tiann/KernelSU#3108)
REVERT: 93c196104 kernel: Use more reasonable symbol name for newfstatat
REVERT: 8d7f119ce kernel: Fixing symbol names causing x64 kernel compilation failure (#3147)
REVERT: f9df4c57f kernel: ksud: Refine rc injection, fix issue of Android Canary 2601
REVERT: b966ce86d kernel: Clean up selinux.c (tiann/KernelSU#3132)
REVERT: 21058f79b kernel: Explicitly check zygote start in execve hook (tiann/KernelSU#3113) (#1038)
REVERT: 863c18044 kernel: remove innecesary code in ksud.c
REVERT: 107de9c16 kernel: check package name before check manager signature (tiann/KernelSU#3134) (#1052)
REVERT: 46644093b selinux: Cache SID lookups for domain checks (tiann/KernelSU#3128) (#1051)
REVERT: ed226983e kernel: Fix potential memory leaks (tiann/KernelSU#3170) (#1082)
REVERT: 5e276d4ed kernel: abort manual hook compilation if not found ksu_handle_sys_reboot (#1093)
REVERT: 8002f622b kernel: supercalls: expose spoof uname function to userspace (#1081)
REVERT: 511dfff82 kernel: remove unnecesary duplicated code in sys_reboot (#1073)
REVERT: 00127f2de Revert "kernel: ksud: migrate init.rc handling to security_file_permission LSM" (#1056)
REVERT: d7de833a9 Sync legacy with dev branch and update scope minimized manual hooks 1.7 (#1047)
REVERT: 0356464d9 kernel: fix ksu_handle_faccessat hook not found for manual hook check
REVERT: bab4d90a6 Merge pull request #1029 from maxsteeel/legacy
REVERT: 1551e9a0e kernel: set KSU_KPROBES_HOOK if not defined KSU_MANUAL_HOOK
REVERT: 919b79a60 kernel: apk_sign: fix return check for ksu_sha256
REVERT: 8c0c055f9 kernel: supercalls: expose ksuver override
REVERT: 5712ea72e kernel: Add some backports and remove some compatibility code
REVERT: d20831e4e kernel: remove unused cflags
REVERT: 70830cb12 kernel: update sulogv2
REVERT: 90ce7c45f kernel: Explicitly check zygote start in execve hook
REVERT: 69e9fa30c kernel: Ensure manager is valid before installing fd (#3115)
REVERT: b68370790 kernel: use selinux_cred() method instead of directly use cred->security (#3111)
REVERT: fd7bb77a4 kernel: bumping fallback ksu_version  to  avoid bad integer value for userspace
REVERT: 800a7a203 sync legacy with dev branch and other things (#1021)
REVERT: a7a85040f fix issues in legacy branch (#1007)
REVERT: 391eb9129 kernel: legacy, add missing early return in ksu_handle_execveat_sucompat (#1009)
REVERT: 3d303237d kernel: correct header guard in seccomp_cache.h
REVERT: 5f4c923db kernel: sync KSU_VERSION  with dev branch
REVERT: 5abd0cbdc sync legacy branch with dev branch (#998)
REVERT: cfd00daef kernel: fix compilation errors in non-gki kernels (#996)
REVERT: 4f8090cdc fix some issues in legacy branch (#995)
REVERT: a93da680e add support for legacy/non-gki kernels (#976)

git-subtree-dir: drivers/kernelsu
git-subtree-split: 3b1e46b04095bd93d506a48a4b6da5eceafeec10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@5ec1cff