KernelSU

A Kernel-based root solution for Android devices.

Note

Official KernelSU support for Non-GKI kernels has been ended.

This is unofficial fork, all rights reserved to @tiann

How to add

curl -LSs "https://raw.githubusercontent.com/rsuntk/KernelSU/main/kernel/setup.sh" | bash -s main

Hook method

1. KPROBES hook:
   • Also used for Loadable Kernel Module (LKM)
   • Default hook method on GKI kernels.
   • Need CONFIG_KSU_MANUAL_HOOK=n
2. Manual hook:
   • Standard KernelSU hook: https://kernelsu.org/guide/how-to-integrate-for-non-gki.html#manually-modify-the-kernel-source
   • backslashxx's syscall manual hook: backslashxx#5
   • Default hook method on Non-GKI kernels.
   • Need CONFIG_KSU_MANUAL_HOOK=y

ARM32 Use-case

This fork have 32-bit support. Disable CONFIG_KSU_64BIT, CONFIG_KPROBES and Enable CONFIG_KSU_MANUAL_HOOK=y (Manual hook recommened!).

You should not disable KSU_64BIT option on 64-bit kernel and userspace! Otherwise unwanted things may happens!

Use case: 64-bit kernel & 32-bit userspace (armv8l) only.

Features

1. Kernel-based su and root access management.
2. Module system based on 5ec1cff's Magic Mount API on KernelSU
3. App Profile: Lock up the root power in a cage.
4. Bringing back non-GKI/GKI 1.0 support
5. Added bare armeabi-v7a/arm32 support.

Compatibility State

KernelSU (before v1.0.0) officially supports Android GKI 2.0 devices (kernel 5.10+).

Older kernels (4.4+) are also compatible, but the kernel will have to be built manually.

With more backports, KernelSU can supports 3.x kernel (3.4-3.18).

Currently, only arm64-v8a and armeabi-v7a (bare) are supported.

Usage

• Installation Instruction
• How to build?
• Official Website

Discussion

• Official KernelSU Telegram: @KernelSU
• Unofficial RKSU Telegram: @rsukrnlsu_grp

Security

For information on reporting security vulnerabilities in KernelSU, see SECURITY.md.

License

• Files under the kernel directory are GPL-2.0-only.
• All other parts except the kernel directory are GPL-3.0-or-later.

Credits

• kernel-assisted-superuser: the KernelSU idea.
• Magisk: the powerful root tool.
• genuine: apk v2 signature validation.
• Diamorphine: some rootkit skills.
• 5ec1cff: magic mount api implementation.