What's Changed

• manager: fix webui load indefenitely if app list is not initialized by @KOWX712 in #3012
• kernel: Move kernel part build rules from Makefile to Kbuild by @dabao1955 in #3003
• ksud: Add process info in bugreport by @aviraxp in #3014
• kernel: Remove second stage init handling for old system by @aviraxp in #3017
• ksud: more verbose log by @5ec1cff in #3021
• Fix another id_ID Translation by @CEKIKOFGAMERS in #3015
• kernel: Remove sepolicy of kernel domain by @aviraxp in #3019
• kernel: escape to ksu domain in execve hook, remove sepolicy between … by @5ec1cff in #3031
• support kernel 6.18 by @aaaaaaaa-815 in #2999
• kernel: use our cred to unmount, remove sepolicy of zygote by @5ec1cff in #3032
• manager: filter ksuapp in superuser screen by @KOWX712 in #3033
• templates: add hyperceiler root template by @sakana164 in #3036
• kernel: check lkm symbols by @5ec1cff in #3035
• manager: add missing filtering in superuser page by @KOWX712 in #3039
• kernel: use $(CC) for check_symbol target by @dabao1955 in #3041
• ci: add ksuinit by @Dr-TSNG in #3026
• ci: Run rust checks for ksuinit and fix them by @aviraxp in #3043
• kernel: Identify manager without PER_USER_RANGE by @aviraxp in #3038
• kernel: Use GFP_ATOMIC for atomic context by @aviraxp in #3052
• refactor(ksud): extract android-only logic by @5ec1cff in #3048
• ci: move ksuinit build to a single workflow by @5ec1cff in #3054
• kernel: Install manager fd in task work by @aviraxp in #3057
• ksud: Decrease log level on release build by @aviraxp in #3058
• manager: Refactor Markdown composable to use FrameLayout by @aviraxp in #3059
• kernel: reformat codes, add workflow to check format by @5ec1cff in #3062
• ci: Correct the file paths checked by clang-format; change trigger path in clang-format workflow by @dabao1955 in #3063
• remove some unused files by @u9521 in #3034
• fix manager crash when switch pages too fast by @u9521 in #3065
• Add mount namespace support 添加挂载命名空间支持 by @u9521 in #2909
• kernel: fix root_groups defs by @aaaaaaaa-815 in #3028
• kernel: fix check format again by @5ec1cff in #3071
• kernel: Refactor file_wrapper by @5ec1cff in #3070
• kernel: setuid_hook: Remove unused includes and function by @rsuntk in #3072
• kernel: release seccomp filter by @5ec1cff in #3077
• kernel: Allocate fake struct on heap by @aviraxp in #3081
• manager: Fix marking refresh on module install and update by @aviraxp in #3082
• manager: Prevent module installation via external sources in safe mode by @sakana164 in #3079
• manager: add webview padding if no request from insets css by @KOWX712 in #3083
• js: add insets documentation and function by @KOWX712 in #3084
• kernel: fix kvrealloc compatibility by @5ec1cff in #3089
• ksuinit: update dependencies and migrate to 2024 by @CanerKaraca23 in #3088
• ksuinit: use upstream by @CanerKaraca23 in #3095
• manager: fix all warnings by @CanerKaraca23 in #3098
• ksud: update dependencies by @CanerKaraca23 in #3096
• Revert "ksuinit: use upstream" by @yujincheng08 in #3104
• Revert "Revert "ksuinit: use upstream"" by @aviraxp in #3105
• kernel: append to init.rc instead of prepending to atrace.rc by @5ec1cff in #3107
• kernel: use selinux_cred() method instead of directly use cred->security by @AlexLiuDev233 in #3111
• Translations update from Hosted Weblate by @weblate in #3049
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #3067
• kernel: Ensure manager is valid before installing fd by @aviraxp in #3115
• manager: expose exit to javascript interface by @KOWX712 in #3112
• kernel: fix Wcalloc-transposed-args by @aaaaaaaa-815 in #3121
• workflow: remove unnecessary strings by @CanerKaraca23 in #3120
• kernel, ksud, manager: Remove enhanced security feature by @aviraxp in #3123
• kernel: Explicitly check zygote start in execve hook by @aviraxp in #3113
• manager: fix ksu.fullScreen by @KOWX712 in #3126
• selinux: Cache SID lookups for domain checks by @0xSecureByte in #3128
• kerenl: check package name before check manager signature by @u9521 in #3134
• manager: add file chooser support to WebUI by @KOWX712 in #3139
• manager: Fix a crash by @YuKongA in #3140
• kernel: Clean up selinux.c by @s-b-repo in #3132
• ksud: Update resetprop from Magisk v30.6 by @aviraxp in #3144
• Translations update from Hosted Weblate by @weblate in #3124
• kernel: Fixing symbol names causing x64 kernel compilation failure by @u9521 in #3147
• Update arch.h by @aviraxp in #3148
• kernel: improve Git repository detection for KernelSU versioning by @dabao1955 in #3108
• manager: remove Coil dependency and add OkHttp directly by @u9521 in #3154
• kernel: add bazel workaround back by @5ec1cff in #3157
• manager: Add expandable module description support by @YuKongA in #3161
• manager/userspace: Add desktop shortcut support for module action/webui by @YuKongA in #3159
• manager(refactor): change kernel umount to a switch preference, figure the sucompte string problem by @MiRinChan in #3146
• manager: Migrate to navigation3 + navigationevent by @YuKongA in #3164
• build(deps): bump the maven group across 1 directory with 2 updates by @dependabot[bot] in #3163
• Fix Potential Memory leaks. by @fatalcoder524 in #3170
• fix(webui): The internal/colors.css is empty source when WebUIActivity started by shortcut by @lamprose in #3172
• manager: Navgation3 improve by @u9521 in #3175
• manager: check module status before executing action or WebUI by @u9521 in #3179
• manager: Reduce recomposition on the home screen by @YunZiA in #3180
• kernel: Fix setup_selinux using __task_cred directly by @jsoltan226 in #3189
• manager: Allow patching for devices with other different KMI versions by @u9521 in #3185
• manager: Refactor WebUI to Compose & Rename enableInsets to enableEdgeToEdge by @u9521 in #3190
• Translations update from Hosted Weblate by @weblate in #3145
• manager: optimize BottomBar pagescroll animation by @u9521 in #3196
• manager: add animation to page back navigation by @u9521 in #3197
• manager: Fix some recomposition issues by @YuKongA in #3198
• manager: Refactor OEM detection for shortcut permission by @YuKongA in #3201
• Translations update from Hosted Weblate by @weblate in #3200

New Contributors

• @0xSecureByte made their first contribution in #3128
• @s-b-repo made their first contribution in #3132
• @MiRinChan made their first contribution in #3146
• @fatalcoder524 made thei...

Highlights:

1. Breaking Change: After upgrading to 3.0, you need to reinstall all modules, refer: metamodule
2. Official Module Repository: https://modules.kernelsu.org/

1. 重大变更：升级到 3.0 后需要重新安装所有模块，参考：元模块
2. 官方模块仓库：https://modules.kernelsu.org/

What's Changed

• feat(ksud): Optimize ensure_dir_exist and do not hardcode path by @Tools-cx-app in #2932
• kernel: Prune allowlist only after boot completed by @aviraxp in #2922
• manager: display the same UID as a group by @YuKongA in #2933
• manager: fix webui package manager by @YuKongA in #2934
• kernel: no need to remark process on post-fs-data and boot-completed by @5ec1cff in #2935
• kernel: file_wrapper: copy mode of original inode by @5ec1cff in #2937
• kernel: Replace kmalloc() usages with kzalloc() by @aviraxp in #2939
• support metamodule, remove built-in overlayfs mount by @Ylarod in #2929
• ksud: add modules_update back by @5ec1cff in #2948
• kernel/ksud: Fix KSU_IOCTL_NUKE_EXT4_SYSFS definition by @aviraxp in #2949
• kernel: expose umount list to ioctl interface by @backslashxx in #2950
• manager: add inset support to webui by @KOWX712 in #2952
• Add undo uninstall module feature 添加撤销卸载模块功能 by @u9521 in #2920
• Translations update from Hosted Weblate by @weblate in #2917
• Add meta-overlayfs to Dependabot by @CanerKaraca23 in #2956
• add module config, migrate managedFeatures by @Ylarod in #2965
• ksud: Use regex to validate module id by @aviraxp in #2968
• chore(ksud): enable clippy::all, clippy::pedantic && make clippy happy by @Tools-cx-app in #2970
• manager: add support for opening and flashing zip files directly by @sakana164 in #2967
• build(deps): bump androidx.activity:activity-compose from 1.11.0 to 1.12.0 in /manager in the maven group across 1 directory by @dependabot[bot] in #2964
• ksud: Set KSU_MODULE only for module script by @aviraxp in #2971
• kernel: Unmount all isolated process which forks from zygote by @aviraxp in #2972
• Remove meta-overlayfs from Dependabot by @CanerKaraca23 in #2974
• ksud: refine boot patch, add --out-name arg to boot-patch and boot-restore command by @5ec1cff in #2982
• kernel: Remove unreachable vfs_statx handling by @aviraxp in #2987
• manager: Add confirmation dialog for ZIP module installation via external sources by @sakana164 in #2989
• manager: provide monet color to webui by @KOWX712 in #2981
• Translations update from Hosted Weblate by @weblate in #2963
• add hasFragileUserData to keep manager data when uninstall by @u9521 in #3005

New Contributors

• @Tools-cx-app made their first contribution in #2932

Full Changelog: v2.1.2...v3.0.0

Highlights

New sucompat implementation, fixed a large number of related side-channel attacks

What's Changed

• Translations update from Hosted Weblate by @weblate in #2636
• Fix legacy prctl check condition by @aviraxp in #2864
• kernel: supercall: allow escalation on ioctl interface by @backslashxx in #2862
• Support building for kernel 6.14+ by @hmtheboy154 in #2662
• support mainline kernel by @aaaaaaaa-815 in #2869
• kernel: use sys_enter tracepoint for sucompat by @Ylarod in #2866
• Update Kernel Patches by @CanerKaraca23 in #2868
• fix: mark tif by @Ylarod in #2871
• fix sepolicy patch hint by @Ylarod in #2872
• feature: add enhanced security by @Ylarod in #2873
• manager: some ui changes by @YuKongA in #2870
• fix: sucompat by @Ylarod in #2874
• Translations update from Hosted Weblate by @weblate in #2875
• Revert "kernel: remove unused workqueue" by @aviraxp in #2877
• Translations update from Hosted Weblate by @weblate in #2876
• Replace mutex with spinlock for tracepoint registration by @aviraxp in #2882
• Switch kretprobe to heap by @aviraxp in #2880
• kernel: Refactor selinux/selinux.c by @shadichy in #2881
• Clean up kernel code by @aviraxp in #2898
• manager: install: add choose partition support by @YuKongA in #2896
• manager: if manager incompatible with current kernel, don't save ksud by @AlexLiuDev233 in #2895
• website: fix Japanese translation of installation guide by @kitadai31 in #2897
• manager: simplify find boot image by @tiann in #2901
• manager: Fix export log toast crash by showing Toast on main thread by @suqi8 in #2904
• kernel: Use task work to install fd by @aviraxp in #2905
• Translations update from Hosted Weblate by @weblate in #2879
• manager: 修复模板状态显示问题 by @u9521 in #2910
• kernel: Fix task flag marking for root and shell UID by @aviraxp in #2913
• kernel: fix zygote mark on first boot by @tiann in #2924
• kernel: refine syscall_hook_manager by @5ec1cff in #2925
• manager: introduce webui package manager api by @KOWX712 in #2928
• js: provide package manager function and documentation by @KOWX712 in #2930
• ci: fix android16-6.12 gki build by @tiann in #2931

New Contributors

• @shadichy made their first contribution in #2881
• @kitadai31 made their first contribution in #2897
• @suqi8 made their first contribution in #2904
• @u9521 made their first contribution in #2910
• @KOWX712 made their first contribution in #2928

Full Changelog: v2.0.0...v2.1.2

Highlights

1. New supercall implementation: remove the tricky LSM hook with seccomp and ioctl, avoiding numerous side-channel attacks.
2. Support for kernel 6.12 and above.
3. Brand new theme.

What's Changed

• ci: Update lkm kernel version by @dabao1955 in #2567
• manager: hide root related features if kernelsu not available by @rsuntk in #2555
• kernel/throne_tracker: we just uninstalled the manager, stop looking for it by @backslashxx in #2584
• Translations update from Hosted Weblate by @weblate in #2558
• build(deps): bump the npm group across 1 directory with 24 updates by @dependabot[bot] in #2586
• build(deps): bump the crates group across 1 directory with 53 updates by @dependabot[bot] in #2585
• build(deps): bump the maven group across 1 directory with 12 updates by @dependabot[bot] in #2579
• ksud/installer: /odm handling by @backslashxx in #2513
• ci: update kmi versions by @ukriu in #2591
• Update zip-extensions and set needed features for zip by @aviraxp in #2592
• Fix fallback option for createRootShell() by @aviraxp in #2593
• Add a formatting string for the update list #2556 by @ShirkNeko in #2597
• build(deps): bump the maven group across 1 directory with 4 updates by @dependabot[bot] in #2612
• throne_tracker: avoid cross fs access by @aviraxp in #2626
• Switch to prepare_creds/commit_creds by @aviraxp in #2631
• kernel: throne_tracker: avoid cross-fs traversal using s_magic check by @backslashxx in #2633
• Translations update from Hosted Weblate by @weblate in #2587
• build(deps): bump the maven group across 1 directory with 7 updates by @dependabot[bot] in #2629
• kernel: core_hook: fix refcount leaks on try_umount by @rsuntk in #2635
• manger: fix lkm detection by @HSSkyBoy in #2654
• kernel: selinux: rules: Fix illegal RCU lock usage in apply_kernelsu_rules() by @Tashar02 in #2646
• kernel: added new prctl CMD_GET_MANAGER_UID to get the uid of the crowned manager by @rifsxd in #2673
• feat(ui): improve predictive back animations by @wxxsfxyzm in #2675
• ksud: make clippy happy by @5ec1cff in #2683
• ksud: support vendor_boot patching for some odd devices by @ukriu in #2650
• Update resetprop from Magisk v30.2 by @aviraxp in #2700
• kernel: selinux: rules: Micro-optimize get_policydb() and fix illegal RCU lock usage in handle_sepolicy() by @Tashar02 in #2695
• Reset seccomp filter count when escaping to root by @aviraxp in #2708
• Handle unmount for isolated process correctly by @aviraxp in #2696
• Revert "Handle unmount for isolated process correctly" by @Ylarod in #2718
• manager: switch ui to miuix design style by @YuKongA in #2710
• manager: fix button issues in module cards by @YuKongA in #2719
• manager: Fix some issues by @YuKongA in #2725
• manager: Add uninstall 2nd confirm by @YuKongA in #2729
• manager: Support search module by @YuKongA in #2730
• Strip JNI debug logs on release build by @aviraxp in #2732
• Add files via upload by @aviraxp in #2733
• fix 'for' loop problem by @aaaaaaaa-815 in #2745
• Unmount isolated process which forks from zygote unconditionally by @aviraxp in #2747
• Tweak shizuku template description by @aviraxp in #2746
• Revert "Unmount isolated process which forks from zygote unconditionally" by @yujincheng08 in #2776
• manager: Refactor module and superuser UI by @YuKongA in #2783
• manager: Allow module update info to scroll naturally by @YuKongA in #2784
• Don't write newline character to cgroup node by @aviraxp in #2804
• remove ksu tmp by @Ylarod in #2815
• Fix kernel panics caused by thread info flag corruption by @kerneltoast in #2818
• ci: use ddk for faster ci, manual gki image build by @Ylarod in #2817
• Fix incorrect function names in non-GKI integration documentation by @Copilot in #2722
• kernel: fix out-of-tree building by @Ylarod in #2819
• ci: move workflows to top-level and fix workflow references by @sakana164 in #2828
• initial fastlane structures from IzzyOnDroid by @IzzySoft in #2715
• templates: update translation by @igormiguell in #2761
• Add another translation in id_ID by @CEKIKOFGAMERS in #2797
• ci: Fix LKM version number anomaly and Git ownership issues by @Prslc in #2832
• manager: add kernel_umount switch by @YuKongA in #2848
• update ioctl macro by @Ylarod in #2850
• ci: build dev manager by @Ylarod in #2851
• Reapply: "kernel: Allow to use in Private Space" by @backslashxx in #2857

New Contributors

• @ShirkNeko made their first contribution in #2597
• @HSSkyBoy made their first contribution in #2654
• @Tashar02 made their first contribution in #2646
• @wxxsfxyzm made their first contribution in #2675
• @aaaaaaaa-815 made their first contribution in #2745
• @kerneltoast made their first contribution in #2818
• @Copilot made their first contribution in #2722
• @sakana164 made their first contribution in #2828
• @IzzySoft made their first contribution in #2715
• @CEKIKOFGAMERS made their first contribution in #2797
• @Prslc made their first contribution in #2832

Full Changelog: v1.0.5...v2.0.0

• [Manager]: UI improvements
• [Module]: Fix potential corruption of module files during updates or installations.
• [Kernel]: Resolve occasional reboots when using su.
• [SU]: Correct the global mount namespace issue.

• [Kernel] Support for kernel version 6.6
• [Module] Support for action.sh
• [Manager] Various UI improvements

WARNING: Non-GKI devices should not upgrade to this version!

What's Changed

• manager: fix translation errors in zh_CN by @WenHao2130 in #1790
• 从非官方支持设备中移除K-Nel-M1721 by @KNKJ55 in #1792
• non-GKI:Remove maintainer Coconutat's repositories by @Coconutat in #1794
• Convert devpts domain to ksu_file by @aviraxp in #1801
• manager: fix update no response when changelog is empty by @TinyHai in #1786
• build(deps-dev): bump vitepress from 1.2.2 to 1.2.3 in /website by @dependabot in #1803
• build(deps): bump zip from 2.1.0 to 2.1.2 in /userspace/ksud by @dependabot in #1799
• build(deps): bump zip-extensions from 0.6.2 to 0.7.0 in /userspace/ksud by @dependabot in #1798
• website: update translations by @igormiguell in #1796
• build(deps): bump lifecycle from 2.8.0 to 2.8.1 in /manager by @dependabot in #1782
• build(deps): bump agp from 8.4.1 to 8.5.0 in /manager by @dependabot in #1824
• build(deps): bump androidx.compose:compose-bom from 2024.05.00 to 2024.06.00 in /manager by @dependabot in #1820
• build(deps): bump clap from 4.5.4 to 4.5.7 in /userspace/ksud by @dependabot in #1817
• build(deps): bump regex from 1.10.4 to 1.10.5 in /userspace/ksud by @dependabot in #1815
• build(deps): bump zip from 2.1.2 to 2.1.3 in /userspace/ksud by @dependabot in #1810
• website: fix typo by @dabao1955 in #1807
• Redirect the Feature Requests issue template tab by @dabao1955 in #1788
• manager: improve grammar in english by @igormiguell in #1814
• build(deps): bump com.google.devtools.ksp from 2.0.0-1.0.21 to 2.0.0-1.0.22 in /manager by @dependabot in #1811
• Translations update from Hosted Weblate by @weblate in #1734
• throne_tracker: skip iterate if failed to open dir by @5ec1cff in #1832
• Update resetprop by @aviraxp in #1842
• build(deps): bump log from 0.4.21 to 0.4.22 in /userspace/ksud by @dependabot in #1843
• build(deps): bump android_logger from 0.13.3 to 0.14.1 in /userspace/ksud by @dependabot in #1830
• website: fix typo by @igormiguell in #1834
• build(deps): bump clap from 4.5.7 to 4.5.8 in /userspace/ksud by @dependabot in #1850
• build(deps): bump lifecycle from 2.8.1 to 2.8.3 in /manager by @dependabot in #1851
• ksud: [Fix] grant root to the shell in debug mode by @RobinChenJP in #1853
• ksud: upgrade zip by @yujincheng08 in #1859
• Revert "ksud: [Fix] grant root to the shell in debug mode" by @yujincheng08 in #1860
• build(deps-dev): bump vitepress from 1.2.3 to 1.3.0 in /website by @dependabot in #1865
• Upgrade gradle by @yujincheng08 in #1866
• Setup Android SDK by @yujincheng08 in #1867
• build(deps): bump clap from 4.5.8 to 4.5.9 in /userspace/ksud by @dependabot in #1868
• build(deps): bump rust-embed from 8.4.0 to 8.5.0 in /userspace/ksud by @dependabot in #1869
• Allow skipping commented policy by @aviraxp in #1870
• build(deps): bump agp from 8.5.0 to 8.5.1 in /manager by @dependabot in #1873
• build(deps): bump com.google.devtools.ksp from 2.0.0-1.0.22 to 2.0.0-1.0.23 in /manager by @dependabot in #1872
• build(deps-dev): bump vitepress from 1.3.0 to 1.3.1 in /website by @dependabot in #1879
• Upgrade deps by @yujincheng08 in #1886
• build(deps): bump org.lsposed.libcxx:libcxx from 27.0.11718014-beta1 to 27.0.12077973 in /manager by @dependabot in #1885
• build(deps): bump io.coil-kt:coil-compose from 2.6.0 to 2.7.0 in /manager by @dependabot in #1888
• Upgrade zip by @yujincheng08 in #1891
• Group dependabot dependencies by @yujincheng08 in #1892
• build(deps): bump the crates group in /userspace/ksud with 40 updates by @dependabot in #1894
• build(deps): bump the npm group in /website with 13 updates by @dependabot in #1893
• build(deps): bump the crates group in /userspace/ksud with 3 updates by @dependabot in #1898
• build(deps): bump the npm group in /website with 2 updates by @dependabot in #1899
• Upgrade rustix by @yujincheng08 in #1900
• build(deps): bump syn from 2.0.71 to 2.0.72 in /userspace/ksud in the crates group by @dependabot in #1902
• build(deps): bump the npm group in /website with 3 updates by @dependabot in #1903
• build(deps): bump the npm group in /website with 3 updates by @dependabot in #1905
• build(deps): bump the crates group in /userspace/ksud with 7 updates by @dependabot in #1908
• build(deps): bump the npm group in /website with 6 updates by @dependabot in #1907

New Contributors

• @WenHao2130 made their first contribution in #1790
• @RobinChenJP made their first contribution in #1853

Full Changelog: v1.0.0...v1.0.1

KernelSU has been born for two years. Today we officially welcome version 1.0!

Due to the fact that we haven't added features to non-GKI devices for a long time, and maintaining them requires a significant amount of time, we have removed support for non-GKI devices. Non-GKI devices can only stay on version 0.9.5 (the manager can update). In the future, we will focus on adding new features for GKI devices.

Our energy is limited, but the rewards are even more limited, so please understand our choice, thank you!

• [Kernel] Fix random reboot caused by potential deadlock
• [Kernel] Support private space for Android 15
• [Manager] Fix file residue after complete uninstallation
• [Manager] Support saving logs locally