tiann / kernelsu

A Kernel based root solution for Android

English | Español | 简体中文 | 繁體中文 | 日本語 | Polski | Português (Brasil) | Türkçe | Русский | Tiếng Việt | Indonesia | עברית | हिंदी

KernelSU

A Kernel-based root solution for Android devices.

Features

1. Kernel-based su and root access management.
2. Module system based on OverlayFS.
3. App Profile: Lock up the root power in a cage.

Compatibility State

KernelSU officially supports Android GKI 2.0 devices (kernel 5.10+). Older kernels (4.14+) are also compatible, but the kernel will have to be built manually.

With this, WSA, ChromeOS, and container-based Android are all supported.

Currently, only arm64-v8a and x86_64 are supported.

Usage

• Installation Instruction
• How to build?
• Official Website

Translation

To help translate KernelSU or improve existing translations, please use Weblate. PR of Manager's translation is no longer accepted, because it will conflict with Weblate.

Discussion

• Telegram: @KernelSU

Security

For information on reporting security vulnerabilities in KernelSU, see SECURITY.md.

License

• Files under the kernel directory are GPL-2.0-only.
• All other parts except the kernel directory are GPL-3.0-or-later.

Credits

• kernel-assisted-superuser: the KernelSU idea.
• Magisk: the powerful root tool.
• genuine: apk v2 signature validation.
• Diamorphine: some rootkit skills.

kernelsu's Issues

Android12以下应用程序的UI颜色错误

[Add Device]: Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Repository URL

https://github.com/SoDebug/kernel_xiaomi_raphael

Device

Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Code of Conduct

• I'm the maintainer of this repository

It is extremely difficult to obtain help information and version information for the su command.

I tried the following commands, but I couldn't get the correct help information and version information.

OP591BL1:/ $ su --help
su: su: --: unknown option
1|OP591BL1:/ $ su -h
OP591BL1:/ # exit
OP591BL1:/ $ su -?
su: su: -?: unknown option
1|OP591BL1:/ $ su -v
# Copyright (c) 2010, 2012, 2013, 2014
#       Thorsten Glaser <[email protected]>
# This file is provided under the same terms as mksh.
#-
# Minimal /system/etc/mkshrc for Android
#
# Support: https://launchpad.net/mksh

set +o nohup

if (( USER_ID )); then PS1='$'; else PS1='#'; fi
PS4='[$EPOCHREALTIME] '; PS1='${|
        local e=$?

        (( e )) && REPLY+="$e|"

        return $e
}$HOSTNAME:${PWD:-?} '"$PS1 "

# qiuchangping@BSP add for support "ll" commond
alias l='ls'
alias la='l -a'
alias ll='l -l'
alias lo='l -a -l'
OP591BL1:/ # exit
exit
OP591BL1:/ $ su -V
su: su: -V: unknown option
1|OP591BL1:/ $ su --version
su: su: --: unknown option
1|OP591BL1:/ $

Supporting x86/x86_64

Hi, I just read about the project and I really like it. I am maintaining BlissOS and currently looking for a better root solution than the old Superuser made by koush. But looking at the codes, it seems like the project only support arm64 so far, are there any plan for x86/x86_64 ? I can help you test with x86_64 if you want.

我该如何下载到boot.img

我的手机内核版本是5.10.101，我在action里面寻找但是最新版并没有对应我内核版本的boot.img，请问我必须亲自编译它吗

Manager crashes on some a13 custom roms

Some a13 custom roms force device to vibrate on overscroll animation. But app required to have permission to vibrate or else it will crash. Maybe you can add required permission to manifest?

ksud sepolicy apply file doesn't work

Describe the bug
command: ksud sepolicy apply file
1.Execution succeed and doesn't work.

To Reproduce
Steps to reproduce the behavior:

1. exec: /data/adb/ksud sepolicy apply /cache/l.rule
2. result: NormalPerm(NormalPerm { op: "allow", source: ["platform_app"], target: ["default_prop"], class: ["property_service"], perm: ["set"] })
3. [ 1125.629091] type=1107 audit(1676100930.295:2015): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=persist.mi.current_action pid=13647 uid=10062 gid=10062 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0'

Expected behavior
Execute successfully and take effect

Screenshots

Smartphone (please complete the following information):

• Device: [xiaomi 10 pro]
• OS: [android 12]
• Version [miui dev 22.7.19]
• KernelSU/Manager [10582/3.7]

Additional context
allow platform_app default_prop property_service set

[Add Device]: Redmi Note9 Pro (gauguin)

Repository URL

https://github.com/Molyuu/neko_kernel_xiaomi_gauguin/

Device

Redmi Note 9 Pro/ Mi 10T Lite/ Mi 10i

Code of Conduct

• I'm the maintainer of this repository

[Add Device]: Alioth,Apollo,Munch (AOSP only)

Repository URL

https://github.com/WeeAris/Realking_su_xiaomi_sm8250

Device

Apollo(Redmi K30S Ultra/Mi 10T/Mi 10T Pro)，Alioth(Redmi K40/POCO F3/Mi 11X)，Munch(Redmi K40S/POCO F4)

Code of Conduct

• I'm the maintainer of this repository

I wonder whether we could patch vmlinux to support Kernel-SU.

I wonder whether we could patch vmlinux to support Kernel-SU or not.

For chromeOS, I've seen vmlinux system.raw.img vendor.raw.img into ROOT-A: /opt/google/vms/android.

I want to make its Android Container rooted, so could I patch vmlinux to support Kernel-SU？

Add Reload App List button

When the new application is installed, it does not appear in the applications list. It is necessary to exit the Kernelsu application and enter it again. It would be good to put a button to refresh the application list.

website: i18n support

Cause i18n support for vitepress is merged, It's time to add translations to website

无法启用overlayfs解锁system

开启后只要换个页面再回去就自己关了
就算不关页面直接重启开机还是关的

【超级会员V5】通过百度网盘分享的文件：000000
链接:https://pan.baidu.com/s/1DxWN8aSDsIb_7lbEGuZPCQ?pwd=9685 
提取码:9685
复制这段内容打开「百度网盘APP 即可获取」
系统环境
安卓13
miui14.0.23.1.9dev 开发版
小米12s ultra

[Add Device]: Redmi K40 (alioth)

Repository URL

https://codeberg.org/LeviMarvin/kernel_xiaomi_alioth

Device

Alioth (Redmi K40)

Code of Conduct

• I'm the maintainer of this repository

Configs are not going into effect for KernelSU

I'm trying to build my kernel with KernelSU and have defined the config in the device_defconfig file as per the documentation.
But still, when I'm trying to build it, I'm getting the error: #error("CONFIG_KPROBES must be enabled for KernelSU!")
Any pointers on this please?
Below are the flags which I'm putting in my defconfig file:

CONFIG_KPROBES=y
CONFIG_HAVE_KPROBES=y
CONFIG_KPROBE_EVENTS=y

[Add Device]: Redmi K40 / POCO F3

Repository URL

https://github.com/LeviMarvin/kernel_xiaomi_alioth

Device

Redmi K40 / POCO F3

Code of Conduct

• I'm the maintainer of this repository

[建议] 会考虑发布一个KernelSU模块助手吗？

就是可以在那个应用内搜索并点击安装某个插件 例如LSPosed还有其他支持的插件

我不知道这个议题放在这里是否合适

无法使用太极 阳

我安装了太极，然后安装了太极模块zygsic版本后，可以正常开机，但是太极里面还显示太极阴，使用magisk模块后，重启卡米标接近十分钟，我强制关机，然后开机，仍然无法使用太极阳仍然显示太极阴且magisk版本太极为灰色开启状态无法调节
我卸载了所有模块和太极阴，直接安装太极zygsic版本提示需要先安装太极，安装之后模块在管理器中消失，太极仍旧显示阴，magisk版本也是一样
【超级会员V5】通过百度网盘分享的文件：qqqqq
链接:https://pan.baidu.com/s/1sujcCPXVu0MwKIH563KaXw?pwd=095z 
提取码:095z
复制这段内容打开「百度网盘APP 即可获取」
I installed Tai Chi, and then installed the zygsic version of the Tai Chi module, which can be started normally. However, Tai Chi Yin is also displayed in Tai Chi. After using the magisk module, restart the Kami sign for nearly ten minutes. I forced to shut down, and then start up, still unable to use Tai Chi Yang, which still displays Tai Chi Yin, and the magisk version of Tai Chi is gray and cannot be adjusted
I uninstalled all modules and Taiji Yin, and directly installed the Taiji zygsic version, which prompted that Taiji needs to be installed first. After installation, the module disappears in the manager, and Taiji still displays Yin, and so does the magisk version

[Add Device]: OPPO Reno Ace (OP4A89)

Repository URL

https://github.com/guh0613/android_kernel_oppo_sm8150

Device

OPPO Reno Ace (OP4A89)

Code of Conduct

• I'm the maintainer of this repository

No global namespace in libsu

Since KernelSU doesn't export su in system/bin, tried this way to create a root shell with KernelSU.

KernelSU/manager/app/src/main/java/me/weishu/kernelsu/ui/util/KsuCli.kt

Line 28 in 962649f

builder.build(getKsuDaemonPath(), "debug", "su")

And let's read its namespace:

D/SHELL_IN: readlink /proc/self/ns/mnt
D/SHELLOUT: mnt:[4026533238]

It still has its own namespace, not the global one. I also trid using simple_su in libsu, but failed as well.
And it doesn't act like su --mount-master.
When I tried simple_su in adb, it works fine.

cas:/data/local/tmp $ ./simple_su
cas:/data/local/tmp # readlink /proc/self/ns/mnt
mnt:[4026531840]

请教一下大佬为何不将KernelSU设计为一个GKI的独立驱动模块呢

请教一下大佬为何不将KernelSU设计为一个GKI的独立驱动模块呢，而是将KernelSU编译进为不同的GKI版本内核呢, 个人感觉编译为不同的GKI内核版本去单独编译一个是工作量会更大吧

No working initrd-magisk

When i updated my android x86 whith kernalsu i doesn't have access to magisk, i meen kernalsu blocks initrd-magisk

[security] restrictions on root process

Should we restrict root process?

1. setuid to manager_uid
2. ptrace manager
3. load_module without the manager's approval

manual workflow approval before pr actions running

https://github.com/marketplace/actions/manual-workflow-approval

[Add Device]: meizu16s

Repository URL

1

Device

4.14.83-perf＋

Code of Conduct

• I'm the maintainer of this repository

KernelSU doesn't work and show "prctl reply error"

Here is my kernel source :
https://github.com/hmtheboy154/Darkmatter-kernel/tree/umbral

I also have this source which contain KernelSU so I can easily merge them
https://github.com/hmtheboy154/kernel_ksu

How to download image

I've never found the download link...

xiaomi12,android12

sorry to bother you.
My phone is xiaomi12,android12；The bootloader is unlocked；The GKI version is 5.10.101. I've download the file : "Image-android12-5.10.101_2022-05"；
And I tried both the two files：Image、Image.lz4；Like this:
fastboot flash boot Image
fastboot reboot

fastboot flash boot Image.lz4
fastboot reboot

But It did not work?
Please help, and much grateful

[FR] Monochrome icon support

https://developer.android.com/about/versions/13/features#themed-app-icons

Kernelsu action error

[Add Device]: Redmi K30 5G ( picasso ) / Redmi K30i 5G ( picasso_48m )

Repository URL

https://github.com/EndCredits/kernel_xiaomi_sm7250

Device

Redmi K30 5G ( picasso ) , Redmi K30i 5G ( picasso_48m)

Code of Conduct

• I'm the maintainer of this repository

TIF_SECCOMP is removed from x86's thread_info.h

KernelSU/kernel/ksu.c

Line 60 in 9613998

current_thread_info()->flags &= ~TIF_SECCOMP;

https://lore.kernel.org/all/[email protected]/

能否添加在点击底栏的超级用户按钮来刷新Root List的功能

能否添加在超级用户页面时，点击底栏的超级用户来刷新Root List的功能。这样可以更方便的刷新AllowList而不用下拉刷新。

vendor overlay breaks stock vendor mount

Describe the bug
I get stuck on the first screen when I first start up after installed this module.

After successfully entering the system, the module has been disabled.

To Reproduce
Steps to reproduce the behavior:

1. Flash this module 门禁卡.zip
2. Reboot

Expected behavior
This module is created by cardemulator, allows the app to systemless modify /vendor/etc/libnfc-nxp.conf for the purpose of emulating nfc cards.

Screenshots
If applicable, add screenshots to help explain your problem.

Smartphone (please complete the following information):

• Device: [Oneplus 9RT]
• OS: [PixelOS]
• Version [33]

Additional context
Add any other context about the problem here.
KernelSU_bugreport_2023-02-12_14_16.tar.gz

Root状态备份

由于需要手动开启Root权限，是否考虑导出Root状态功能

[Add Device]:

Repository URL

https://github.com/z1298808165/kernel_xiaomi_star

Device

GKI 1.0

Code of Conduct

• I'm the maintainer of this repository

是否能添加在设定页时点击主页按钮返回到主页

是否能添加在 设定页 时点击 主页 按钮返回到主页，只能点击右上角的返回箭头太过难受

An error was reported when compiling Android12-5.10 x86_64

An error was reported when compiling Android12-5.10 x86_64, but the compilation of Android13-5.15 x86_64 passed.

[Add Device]: OnePlus 5T (dumpling)

Repository URL

https://github.com/linlinger/android_kernel_oneplus_msm8998/tree/lineage-20-KSU

Device

OnePlus 5T (dumpling)

Code of Conduct

• I'm the maintainer of this repository

[Add Device]: Xiaomi POCO X3 / NFC (surya)

Repository URL

https://github.com/rxuglr/android_kernel_xiaomi_surya

Device

Xiaomi POCO X3 / NFC (surya)

Code of Conduct

• I'm the maintainer of this repository

[Add Device]: OnePlus 8 Serials

Repository URL

https://github.com/lateautumn233/android_kernel_oneplus_sm8250

Device

OnePlus 8 Serials

Code of Conduct

• I'm the maintainer of this repository

[Add Device]: Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Repository URL

https://github.com/SoDebug/kernel_xiaomi_raphael

Device

Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Code of Conduct

• I'm the maintainer of this repository

repo list for non-GKI devices

KernelSU unofficially supports non-GKI devices, maybe we can create a repo list for non-GKI devices maintained by other developers. This makes it easier for user to find proper boot.img to use KernelSU.

redmi note 11T pro+ flashboot error

1. redmi note 11T pro+ 5.10.101-android12;
2. miui 13
3. bootload unlocked；

[Add Device]: Apollo(10T/10T_Pro/30S_Ultra)，Alioth(F3/K40/11X)，Munch(F4/K40S)

Repository URL

https://github.com/WeeAris/Realking_su_xiaomi_sm8250

Device

Apollo(Redmi K30S Ultra/Mi 10T/Mi 10T Pro)，Alioth(Redmi K40/POCO F3/Mi 11X)，Munch(Redmi K40S/POCO F4)

Code of Conduct

• I'm the maintainer of this repository

Poco x3 pro GKI kernel

[question]
sorry but is possible make one recent gki (version 5...) work in poco x3 pro hardware build miui 14 ?? or in future?.

[FR] Better navigation bar

Now

Libchecker version

Is there KernelSU Manager for Recovery Mode

like Magisk Manager for Recovery Mode (mm)

[Add Device]: Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Repository URL

https://github.com/cibimo/kernel_xiaomi_raphael_ksu

Device

Xiaomi Redmi K20 Pro / Mi 9T Pro (raphael)

Code of Conduct

• I'm the maintainer of this repository

[Add Device]: Redmi Note 4X(mido)

Repository URL

https://github.com/linlinger/android_kernel_xiaomi_mido/tree/lineage-20.0-KSU

Device

(mido)Redmi Note 4X

Code of Conduct

• I'm the maintainer of this repository