Skip to content

refine symbol_resolver#3469

Merged
aviraxp merged 5 commits into
mainfrom
symresolver
May 17, 2026
Merged

refine symbol_resolver#3469
aviraxp merged 5 commits into
mainfrom
symresolver

Conversation

@5ec1cff

@5ec1cff 5ec1cff commented May 15, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@5ec1cff 5ec1cff requested a review from Copilot May 15, 2026 14:55
Copilot AI reviewed May 15, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR refines KernelSU’s internal symbol resolver by introducing a new resolver API tailored for function-table hooking and adding an explicit initialization step to set up kallsyms traversal helpers across kernel versions.

Changes:

  • Replaced ksu_lookup_symbol() with ksu_resolve_symbol_for_functable_hook() and added ksu_init_symbol_resolver().
  • Implemented a multi-strategy resolver that prefers exact lookup (and .cfi_jt where applicable), falling back to kallsyms iteration.
  • Wired resolver initialization into kernelsu_init() and updated arm64 syscall + LSM hook call sites.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
kernel/infra/symbol_resolver.h Renames exported resolver API and adds init API declaration.
kernel/infra/symbol_resolver.c Adds version-gated resolver strategies, kallsyms helper discovery, and init routine.
kernel/hook/lsm_hook.c Switches to new symbol resolver API.
kernel/hook/arm64/syscall_hook.c Switches syscall-table/ni_syscall resolution to new API.
kernel/core/init.c Calls ksu_init_symbol_resolver() during KernelSU init.
Comments suppressed due to low confidence (1)

kernel/infra/symbol_resolver.c:93

  • For kernels < 6.6, kallsyms_on_each_symbol() passes a non-NULL struct module *mod for module symbols, but lookup_symbol_variant_cb no longer filters those out. This can cause resolve_symbol_variant() to return a module symbol address (regression vs the previous if (mod) return 0; behavior). Consider restoring module filtering for the < 6.6 callback signature (and/or adding an equivalent filter on newer kernels).
static int lookup_symbol_variant_cb(void *data, const char *name, unsigned long addr)
#else
static int lookup_symbol_variant_cb(void *data, const char *name, struct module *mod, unsigned long addr)
#endif
{
    struct ksu_lookup_symbol_ctx *ctx = data;
    size_t name_len;

    if (!name || !addr)
        return 0;

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread kernel/infra/symbol_resolver.h
Comment thread kernel/infra/symbol_resolver.c Outdated
Comment thread kernel/infra/symbol_resolver.c Outdated
@5ec1cff 5ec1cff marked this pull request as ready for review May 17, 2026 08:40
@5ec1cff 5ec1cff requested a review from Copilot May 17, 2026 08:43
Copilot AI reviewed May 17, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

Comments suppressed due to low confidence (1)

kernel/infra/symbol_resolver.c:94

  • For kernels < 6.6, kallsyms_on_each_symbol() provides a struct module *mod parameter so callers can filter out module symbols. The previous implementation skipped mod != NULL, but lookup_symbol_variant_cb() currently ignores mod, which can cause this resolver to pick a module symbol variant. Please restore the mod filter for the <6.6 callback signature.
#if LINUX_VERSION_CODE >= KERNEL_VERSION(6, 6, 0)
static int lookup_symbol_variant_cb(void *data, const char *name, unsigned long addr)
#else
static int lookup_symbol_variant_cb(void *data, const char *name, struct module *mod, unsigned long addr)
#endif
{
    struct ksu_lookup_symbol_ctx *ctx = data;
    size_t name_len;

    if (!name || !addr)
        return 0;

Comment thread kernel/infra/symbol_resolver.h
Comment thread kernel/infra/symbol_resolver.c
Comment thread kernel/infra/symbol_resolver.c
@aviraxp aviraxp merged commit da8e0ab into main May 17, 2026
23 checks passed
@aviraxp aviraxp deleted the symresolver branch May 17, 2026 09:31
pershoot pushed a commit to pershoot/KernelSU-Next that referenced this pull request May 17, 2026
@5ec1cff @pershoot
kernel: refine symbol_resolver (tiann/KernelSU#3469)
64f1ca1
AlexLiuDev233 pushed a commit to ReSukiSU/ReSukiSU that referenced this pull request May 17, 2026
@5ec1cff @AlexLiuDev233
kernel: refine symbol_resolver (tiann/KernelSU#3469)
b9d44a3 
[cherry-picked from upstream commit tiann/KernelSU@da8e0ab]

Signed-off-by: AlexLiuDev233 <wzylin11@outlook.com>
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 19, 2026
@pershoot @shoey63
kernel: susfs (v2.1.0): Introduce SuSFS
899d4a1 
-'kernel_patches: fs/susfs: Implement SuSFS and Toolkit coexistence'
 https://gitlab.com/pershoot/susfs4ksu/-/tree/gki-android14-6.1-dev

-Accommodate:
 -4/15/26: 'kernel: refactor allowlist' (upstream: ksu: tiann#3418)
  allowlist: ksu_uid_should_umount - new app profile lookup (heap-based)
 -4/18/26: 'Use static_key in replace of boolean toggle switch' (upstream: susfs: ee6b1970)
  init: moved susfs_init() (top of kernelsu_init()) for jump label alignment
  extras/supercall: avc/uname for static key (global visibility)
 -4/22/26: sucompat: Seperate ksu_handle_stat for compatibility
 -4/23/26: sucompat: Lower boundary for ksu_handle_stat
 -4/24/26: 'kernel & KernelSU: Invert initial static_key status; Rename all static_key variables'
           (upstream: susfs: 5c5c0dd9)
           extras: use new symbol (susfs_is_avc_log_spoofing_enabled)
           supercall: check new label (susfs_is_uname_spoof_buffer_set)
  extras/boot_event/ksud_integration/supercall: Move jump_label inclusion to top-level
                                                for (uapi) consistency
  Revert: 'sucompat: Lower boundary for ksu_handle_stat' (4/23/26)
  (<6.1 uses legacy)
 -4/25/26: 'KernelSU: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()'
           (upstream: susfs: cbda1353)
  dispatch: convert copy_from_user to peeking for avc/uname
  'KernelSU: Disable seccomp for all zygote spawned root allowed app processes'
  (upstream: susfs: ea24aa94)
  app_profile: optimize escape_with_root_profile
  setuid_hook: unify setresuid
 -4/26/26: 'kernel & KernelSU: Replace ksu_su_compat_enabled boolean toggle with static_key'
           (upstream: susfs: 71507103)
  syscall_event_bridge: optimize hot-path via static_branch_likely
 -4/27/26: 'kernel & KernelSU: Use test_thread_flag() and set_thread_flag() instead of test_ti_thread_flag()
            and set_ti_thread_flag()' (upstream: susfs: e1c57040)
 -4/28/26: 'KernelSU: More optimization in ksu_handle_setresuid() and ksu_handle_umount()'
           (upstream: susfs: b1dceb4c)
           kernel_umount: remove redundant cred overrides
           setuid_hook/kernel_umount: consolidate cred overrides
 -4/29/26: 'KernelSU: Test making some compiler happy'
           (upstream: susfs: c228b924)
           setuid_hook: reduce cred override scope
 -5/2/26: 'kernel & KernelSU: defer susfs_run_sus_path_loop() to workqueue'
          (upstream: susfs: f6255b5f)
          init: move susfs_init (above)
          kernel_umount: restore cred overrides
 -5/6/26: 'KernelSU: Remove the unused deprecated residual devpts hook'
          (upstream: susfs: 9da70b0c)
 -5/11/26: 'feature: selinux hide (tiann#3457)'/'selinux_hide: fix attr/current detection (tiann#3459)'
           (upstream: ksu: 0efe3cf)/(upstream: ksu: 3f388ef)
           init: cleanup calls registration (kernelsu_exit)
           kbuild: refine arch detection and unify core utils
           'kernel & KernelSU: Sync with the upstream fix for new selinux detections'
           (upstream: susfs: 5900f1a3)
           lsm_hook: sync engine rewrite
           selinux: implement SID batching and support exec_sid clearing
  init: Ensure late-load is in-tact and exit cleanup
 -5/12/26: init: Format a few spaces to tabs
  dispatch: Disable KSU AVC Spoof conditionally
 -5/16/26: 'KernelSU: Do not schedule susfs_extra_works when it is already pending'
           (upstream: susfs: f7ae19ef)
 -5/17/26: 'kernel: refine symbol_resolver (tiann#3469)'
           (upstream: ksu: da8e0ab)
           selinux_hide: use it

-https://gitlab.com/simonpunk/susfs4ksu/-/tree/gki-android14-6.1
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 20, 2026
@pershoot @shoey63
kernel: susfs (v2.1.0): Introduce SuSFS
2255abd 
-'kernel_patches: fs/susfs: Implement SuSFS and Toolkit coexistence'
 https://gitlab.com/pershoot/susfs4ksu/-/tree/gki-android14-6.1-dev

-Accommodate:
 -4/15/26: 'kernel: refactor allowlist' (upstream: ksu: tiann#3418)
  allowlist: ksu_uid_should_umount - new app profile lookup (heap-based)
 -4/18/26: 'Use static_key in replace of boolean toggle switch' (upstream: susfs: ee6b1970)
  init: moved susfs_init() (top of kernelsu_init()) for jump label alignment
  extras/supercall: avc/uname for static key (global visibility)
 -4/22/26: sucompat: Seperate ksu_handle_stat for compatibility
 -4/23/26: sucompat: Lower boundary for ksu_handle_stat
 -4/24/26: 'kernel & KernelSU: Invert initial static_key status; Rename all static_key variables'
           (upstream: susfs: 5c5c0dd9)
           extras: use new symbol (susfs_is_avc_log_spoofing_enabled)
           supercall: check new label (susfs_is_uname_spoof_buffer_set)
  extras/boot_event/ksud_integration/supercall: Move jump_label inclusion to top-level
                                                for (uapi) consistency
  Revert: 'sucompat: Lower boundary for ksu_handle_stat' (4/23/26)
  (<6.1 uses legacy)
 -4/25/26: 'KernelSU: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()'
           (upstream: susfs: cbda1353)
  dispatch: convert copy_from_user to peeking for avc/uname
  'KernelSU: Disable seccomp for all zygote spawned root allowed app processes'
  (upstream: susfs: ea24aa94)
  app_profile: optimize escape_with_root_profile
  setuid_hook: unify setresuid
 -4/26/26: 'kernel & KernelSU: Replace ksu_su_compat_enabled boolean toggle with static_key'
           (upstream: susfs: 71507103)
  syscall_event_bridge: optimize hot-path via static_branch_likely
 -4/27/26: 'kernel & KernelSU: Use test_thread_flag() and set_thread_flag() instead of test_ti_thread_flag()
            and set_ti_thread_flag()' (upstream: susfs: e1c57040)
 -4/28/26: 'KernelSU: More optimization in ksu_handle_setresuid() and ksu_handle_umount()'
           (upstream: susfs: b1dceb4c)
           kernel_umount: remove redundant cred overrides
           setuid_hook/kernel_umount: consolidate cred overrides
 -4/29/26: 'KernelSU: Test making some compiler happy'
           (upstream: susfs: c228b924)
           setuid_hook: reduce cred override scope
 -5/2/26: 'kernel & KernelSU: defer susfs_run_sus_path_loop() to workqueue'
          (upstream: susfs: f6255b5f)
          init: move susfs_init (above)
          kernel_umount: restore cred overrides
 -5/6/26: 'KernelSU: Remove the unused deprecated residual devpts hook'
          (upstream: susfs: 9da70b0c)
 -5/11/26: 'feature: selinux hide (tiann#3457)'/'selinux_hide: fix attr/current detection (tiann#3459)'
           (upstream: ksu: 0efe3cf)/(upstream: ksu: 3f388ef)
           init: cleanup calls registration (kernelsu_exit)
           kbuild: refine arch detection and unify core utils
           'kernel & KernelSU: Sync with the upstream fix for new selinux detections'
           (upstream: susfs: 5900f1a3)
           lsm_hook: sync engine rewrite
           selinux: implement SID batching and support exec_sid clearing
  init: Ensure late-load is in-tact and exit cleanup
 -5/12/26: init: Format a few spaces to tabs
  dispatch: Disable KSU AVC Spoof conditionally
 -5/16/26: 'KernelSU: Do not schedule susfs_extra_works when it is already pending'
           (upstream: susfs: f7ae19ef)
 -5/17/26: 'kernel: refine symbol_resolver (tiann#3469)'
           (upstream: ksu: da8e0ab)
           selinux_hide: use it
 -5/20/26: Resolve KernelSU conflicts (@shoey63)
-https://gitlab.com/simonpunk/susfs4ksu/-/tree/gki-android14-6.1
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 20, 2026
@pershoot @shoey63
kernel: susfs (v2.1.0): Introduce SuSFS
fbf1e11 
-'kernel_patches: fs/susfs: Implement SuSFS and Toolkit coexistence'
 https://gitlab.com/pershoot/susfs4ksu/-/tree/gki-android14-6.1-dev

-Accommodate:
 -4/15/26: 'kernel: refactor allowlist' (upstream: ksu: tiann#3418)
  allowlist: ksu_uid_should_umount - new app profile lookup (heap-based)
 -4/18/26: 'Use static_key in replace of boolean toggle switch' (upstream: susfs: ee6b1970)
  init: moved susfs_init() (top of kernelsu_init()) for jump label alignment
  extras/supercall: avc/uname for static key (global visibility)
 -4/22/26: sucompat: Seperate ksu_handle_stat for compatibility
 -4/23/26: sucompat: Lower boundary for ksu_handle_stat
 -4/24/26: 'kernel & KernelSU: Invert initial static_key status; Rename all static_key variables'
           (upstream: susfs: 5c5c0dd9)
           extras: use new symbol (susfs_is_avc_log_spoofing_enabled)
           supercall: check new label (susfs_is_uname_spoof_buffer_set)
  extras/boot_event/ksud_integration/supercall: Move jump_label inclusion to top-level
                                                for (uapi) consistency
  Revert: 'sucompat: Lower boundary for ksu_handle_stat' (4/23/26)
  (<6.1 uses legacy)
 -4/25/26: 'KernelSU: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()'
           (upstream: susfs: cbda1353)
  dispatch: convert copy_from_user to peeking for avc/uname
  'KernelSU: Disable seccomp for all zygote spawned root allowed app processes'
  (upstream: susfs: ea24aa94)
  app_profile: optimize escape_with_root_profile
  setuid_hook: unify setresuid
 -4/26/26: 'kernel & KernelSU: Replace ksu_su_compat_enabled boolean toggle with static_key'
           (upstream: susfs: 71507103)
  syscall_event_bridge: optimize hot-path via static_branch_likely
 -4/27/26: 'kernel & KernelSU: Use test_thread_flag() and set_thread_flag() instead of test_ti_thread_flag()
            and set_ti_thread_flag()' (upstream: susfs: e1c57040)
 -4/28/26: 'KernelSU: More optimization in ksu_handle_setresuid() and ksu_handle_umount()'
           (upstream: susfs: b1dceb4c)
           kernel_umount: remove redundant cred overrides
           setuid_hook/kernel_umount: consolidate cred overrides
 -4/29/26: 'KernelSU: Test making some compiler happy'
           (upstream: susfs: c228b924)
           setuid_hook: reduce cred override scope
 -5/2/26: 'kernel & KernelSU: defer susfs_run_sus_path_loop() to workqueue'
          (upstream: susfs: f6255b5f)
          init: move susfs_init (above)
          kernel_umount: restore cred overrides
 -5/6/26: 'KernelSU: Remove the unused deprecated residual devpts hook'
          (upstream: susfs: 9da70b0c)
 -5/11/26: 'feature: selinux hide (tiann#3457)'/'selinux_hide: fix attr/current detection (tiann#3459)'
           (upstream: ksu: 0efe3cf)/(upstream: ksu: 3f388ef)
           init: cleanup calls registration (kernelsu_exit)
           kbuild: refine arch detection and unify core utils
           'kernel & KernelSU: Sync with the upstream fix for new selinux detections'
           (upstream: susfs: 5900f1a3)
           lsm_hook: sync engine rewrite
           selinux: implement SID batching and support exec_sid clearing
  init: Ensure late-load is in-tact and exit cleanup
 -5/12/26: init: Format a few spaces to tabs
  dispatch: Disable KSU AVC Spoof conditionally
 -5/16/26: 'KernelSU: Do not schedule susfs_extra_works when it is already pending'
           (upstream: susfs: f7ae19ef)
 -5/17/26: 'kernel: refine symbol_resolver (tiann#3469)'
           (upstream: ksu: da8e0ab)
           selinux_hide: use it
 -5/20/26: Resolve KernelSU conflicts (@shoey63)
-https://gitlab.com/simonpunk/susfs4ksu/-/tree/gki-android14-6.1
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 21, 2026
@pershoot @shoey63
kernel: susfs (v2.1.0): Introduce SuSFS
48e0e75 
-'kernel_patches: fs/susfs: Implement SuSFS and Toolkit coexistence'
 https://gitlab.com/pershoot/susfs4ksu/-/tree/gki-android14-6.1-dev

-Accommodate:
 -4/15/26: 'kernel: refactor allowlist' (upstream: ksu: tiann#3418)
  allowlist: ksu_uid_should_umount - new app profile lookup (heap-based)
 -4/18/26: 'Use static_key in replace of boolean toggle switch' (upstream: susfs: ee6b1970)
  init: moved susfs_init() (top of kernelsu_init()) for jump label alignment
  extras/supercall: avc/uname for static key (global visibility)
 -4/22/26: sucompat: Seperate ksu_handle_stat for compatibility
 -4/23/26: sucompat: Lower boundary for ksu_handle_stat
 -4/24/26: 'kernel & KernelSU: Invert initial static_key status; Rename all static_key variables'
           (upstream: susfs: 5c5c0dd9)
           extras: use new symbol (susfs_is_avc_log_spoofing_enabled)
           supercall: check new label (susfs_is_uname_spoof_buffer_set)
  extras/boot_event/ksud_integration/supercall: Move jump_label inclusion to top-level
                                                for (uapi) consistency
  Revert: 'sucompat: Lower boundary for ksu_handle_stat' (4/23/26)
  (<6.1 uses legacy)
 -4/25/26: 'KernelSU: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()'
           (upstream: susfs: cbda1353)
  dispatch: convert copy_from_user to peeking for avc/uname
  'KernelSU: Disable seccomp for all zygote spawned root allowed app processes'
  (upstream: susfs: ea24aa94)
  app_profile: optimize escape_with_root_profile
  setuid_hook: unify setresuid
 -4/26/26: 'kernel & KernelSU: Replace ksu_su_compat_enabled boolean toggle with static_key'
           (upstream: susfs: 71507103)
  syscall_event_bridge: optimize hot-path via static_branch_likely
 -4/27/26: 'kernel & KernelSU: Use test_thread_flag() and set_thread_flag() instead of test_ti_thread_flag()
            and set_ti_thread_flag()' (upstream: susfs: e1c57040)
 -4/28/26: 'KernelSU: More optimization in ksu_handle_setresuid() and ksu_handle_umount()'
           (upstream: susfs: b1dceb4c)
           kernel_umount: remove redundant cred overrides
           setuid_hook/kernel_umount: consolidate cred overrides
 -4/29/26: 'KernelSU: Test making some compiler happy'
           (upstream: susfs: c228b924)
           setuid_hook: reduce cred override scope
 -5/2/26: 'kernel & KernelSU: defer susfs_run_sus_path_loop() to workqueue'
          (upstream: susfs: f6255b5f)
          init: move susfs_init (above)
          kernel_umount: restore cred overrides
 -5/6/26: 'KernelSU: Remove the unused deprecated residual devpts hook'
          (upstream: susfs: 9da70b0c)
 -5/11/26: 'feature: selinux hide (tiann#3457)'/'selinux_hide: fix attr/current detection (tiann#3459)'
           (upstream: ksu: 0efe3cf)/(upstream: ksu: 3f388ef)
           init: cleanup calls registration (kernelsu_exit)
           kbuild: refine arch detection and unify core utils
           'kernel & KernelSU: Sync with the upstream fix for new selinux detections'
           (upstream: susfs: 5900f1a3)
           lsm_hook: sync engine rewrite
           selinux: implement SID batching and support exec_sid clearing
  init: Ensure late-load is in-tact and exit cleanup
 -5/12/26: init: Format a few spaces to tabs
  dispatch: Disable KSU AVC Spoof conditionally
 -5/16/26: 'KernelSU: Do not schedule susfs_extra_works when it is already pending'
           (upstream: susfs: f7ae19ef)
 -5/17/26: 'kernel: refine symbol_resolver (tiann#3469)'
           (upstream: ksu: da8e0ab)
           selinux_hide: use it
 -5/20/26: Resolve KernelSU conflicts (@shoey63)
-https://gitlab.com/simonpunk/susfs4ksu/-/tree/gki-android14-6.1
pershoot pushed a commit to KernelSU-Next/KernelSU-Next that referenced this pull request May 22, 2026
@5ec1cff @pershoot
kernel: refine symbol_resolver (tiann/KernelSU#3469)
4d5ba98
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 23, 2026
@pershoot @shoey63
kernel: susfs (v2.1.0): Introduce SuSFS
aa8be4c 
-'kernel_patches: fs/susfs: Implement SuSFS and Toolkit coexistence'
 https://gitlab.com/pershoot/susfs4ksu/-/tree/gki-android14-6.1-dev

-Accommodate:
 -4/15/26: 'kernel: refactor allowlist' (upstream: ksu: tiann#3418)
  allowlist: ksu_uid_should_umount - new app profile lookup (heap-based)
 -4/18/26: 'Use static_key in replace of boolean toggle switch' (upstream: susfs: ee6b1970)
  init: moved susfs_init() (top of kernelsu_init()) for jump label alignment
  extras/supercall: avc/uname for static key (global visibility)
 -4/22/26: sucompat: Seperate ksu_handle_stat for compatibility
 -4/23/26: sucompat: Lower boundary for ksu_handle_stat
 -4/24/26: 'kernel & KernelSU: Invert initial static_key status; Rename all static_key variables'
           (upstream: susfs: 5c5c0dd9)
           extras: use new symbol (susfs_is_avc_log_spoofing_enabled)
           supercall: check new label (susfs_is_uname_spoof_buffer_set)
  extras/boot_event/ksud_integration/supercall: Move jump_label inclusion to top-level
                                                for (uapi) consistency
  Revert: 'sucompat: Lower boundary for ksu_handle_stat' (4/23/26)
  (<6.1 uses legacy)
 -4/25/26: 'KernelSU: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()'
           (upstream: susfs: cbda1353)
  dispatch: convert copy_from_user to peeking for avc/uname
  'KernelSU: Disable seccomp for all zygote spawned root allowed app processes'
  (upstream: susfs: ea24aa94)
  app_profile: optimize escape_with_root_profile
  setuid_hook: unify setresuid
 -4/26/26: 'kernel & KernelSU: Replace ksu_su_compat_enabled boolean toggle with static_key'
           (upstream: susfs: 71507103)
  syscall_event_bridge: optimize hot-path via static_branch_likely
 -4/27/26: 'kernel & KernelSU: Use test_thread_flag() and set_thread_flag() instead of test_ti_thread_flag()
            and set_ti_thread_flag()' (upstream: susfs: e1c57040)
 -4/28/26: 'KernelSU: More optimization in ksu_handle_setresuid() and ksu_handle_umount()'
           (upstream: susfs: b1dceb4c)
           kernel_umount: remove redundant cred overrides
           setuid_hook/kernel_umount: consolidate cred overrides
 -4/29/26: 'KernelSU: Test making some compiler happy'
           (upstream: susfs: c228b924)
           setuid_hook: reduce cred override scope
 -5/2/26: 'kernel & KernelSU: defer susfs_run_sus_path_loop() to workqueue'
          (upstream: susfs: f6255b5f)
          init: move susfs_init (above)
          kernel_umount: restore cred overrides
 -5/6/26: 'KernelSU: Remove the unused deprecated residual devpts hook'
          (upstream: susfs: 9da70b0c)
 -5/11/26: 'feature: selinux hide (tiann#3457)'/'selinux_hide: fix attr/current detection (tiann#3459)'
           (upstream: ksu: 0efe3cf)/(upstream: ksu: 3f388ef)
           init: cleanup calls registration (kernelsu_exit)
           kbuild: refine arch detection and unify core utils
           'kernel & KernelSU: Sync with the upstream fix for new selinux detections'
           (upstream: susfs: 5900f1a3)
           lsm_hook: sync engine rewrite
           selinux: implement SID batching and support exec_sid clearing
  init: Ensure late-load is in-tact and exit cleanup
 -5/12/26: init: Format a few spaces to tabs
  dispatch: Disable KSU AVC Spoof conditionally
 -5/16/26: 'KernelSU: Do not schedule susfs_extra_works when it is already pending'
           (upstream: susfs: f7ae19ef)
 -5/17/26: 'kernel: refine symbol_resolver (tiann#3469)'
           (upstream: ksu: da8e0ab)
           selinux_hide: use it
 -5/20/26: Resolve KernelSU conflicts (@shoey63)
-https://gitlab.com/simonpunk/susfs4ksu/-/tree/gki-android14-6.1
jinetty pushed a commit to jinetty/android_kernel_xiaomi_sm8450 that referenced this pull request May 23, 2026
@5ec1cff @jinetty
kernel: refine symbol_resolver (tiann/KernelSU#3469)
f16cdbf
jinetty pushed a commit to jinetty/android_kernel_xiaomi_sm8450 that referenced this pull request May 23, 2026
@5ec1cff @jinetty
kernelsu: refine symbol_resolver (tiann/KernelSU#3469)
41402eb
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 24, 2026
@5ec1cff @shoey63
kernel: refine symbol_resolver (tiann#3469)
e9b63dd
shoey63 pushed a commit to shoey63/KernelSU that referenced this pull request May 24, 2026
@5ec1cff @shoey63
kernel: refine symbol_resolver (tiann#3469)
79d7282
jinetty pushed a commit to jinetty/android_kernel_xiaomi_sm8450 that referenced this pull request May 24, 2026
@5ec1cff @jinetty
kernelsu: refine symbol_resolver (tiann/KernelSU#3469)
cefeffe
Flopster101 added a commit to FlopKernel-Series/flop_exynos2100_kernel that referenced this pull request May 26, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from 46ce260dae02..6ee2f7fd5b3f
1e88f47 
6ee2f7fd5b3f manager: fix crash in terminal screen (tiann/KernelSU#3474)
01f5b1408ca0 manager: sync translation from Crowdin (#196)
8a13b7e84d70 ci: let crowdin action use custom PAT (#194)
52368fb6b81a ksud: make cargo clippy
4137a56416ec ksud: cleanup
f43736f4566a ksud: fix build on not aarch64/x86_64/arm android (#193)
6cf9d65b4a1f manager: refactor and modularize settings UI components
dee5e2eba874 kernel: symbol_resolver: resolve symbol suffix starts with '$'
0309ffef8f29 ksud: make cargo clippy happy
3765c0d7dbff ksud: simplify dynamic_manager errors handler and hash parser
62976fbb6f68 manager: fix crash on rapid refresh button clicks (#190)
5f702753cf3d ksud: fix some module scripts won't add KSU_MODULE environment var (tiann/KernelSU#3445)
a39b46869fd8 kernel: Prefer hashed .cfi_jt variants before bare symbols (tiann/KernelSU#3475)
f6eba76f12df mamager: add KsuFullversion to basic.txt (#189)
7d41ac68c5e3 manager: Add kallsyms in bugreport (tiann/KernelSU#3479)
fab88d00ddc6 kernel: handle backport for setprocattr and lsm name(#188)
8f2e7c387282 ci: fix upload mappings (#185)
1a2db2e96ff1 adbroot: support statically-linked GetProperty (tiann/KernelSU#3470)
b9d44a338226 kernel: refine symbol_resolver (tiann/KernelSU#3469)
c5002f5199d4 ksud: fix vendor_boot patch  (#181)
b6706363b955 kernel: fix double free when policydb_write failed
ddcf5d77c3a1 kernel, ksud, manager: implement selinux_hide feature (#179)
3d790eaaabe9 ksud: su: support parsing arguments after user (tiann/KernelSU#3464)
f36096a1c897 kernel: handle backport for policydb
b09af429463d kernel: ensure session_keyring install only when CONFIG_KEYS enable
0d096be05c40 docs: Add contributing guidelines to CONTRIBUTING.md (#176)
d4513aed447c manager: fix ScalePredictiveBackAnimation's clip & fix background color
51574f260ef8 manager: Restrict blur to Android version >= S
f417f72a9d7f manager: custom predictive back animation api & switch to miuix blur
7ac0a90f98f1 manager: remove selinux config & dynamic manager config dialog
1b64087165fc kernel: backport remove_avtab_node for 4.1-
cd4e3f1f779b kernel: fix kernel panic when sel_mutex not exported
71b1ae6176dc kernel: pr_alart -> pr_alert
1d822af2b8af kernel: fix klog.h not include
1ccbf7b64146 kernel: impl non-exported selinux lock warning (#175)
99ab70fe9cf7 ci: inital CodeQL check (#172)
de9409dc7aed manager: fix HighContrastMode x2
7c8c92f8fbd2 manager: remove force fontSize for LabelText & fix HighContrastMode
2ef5d9d199bf kernel: GFP_ATOMIC -> GFP_KERNEL
a7bd8e928da9 kernel: simpler copy policydb implementation
16d2976ed806 manager: fix sort settings are not persistent (#174)
f2625dcce3da kernel: use GFP_ATOMIC for remove_avtab_node
47a539401c0c kernel: prune redundant avtab nodes after deny rules (tiann/KernelSU#3439)
185fa768e9c2 manager: fix wrongly alpha for TopBar/BottomBar again
3c969278a56f manager: fix wrongly alpha for TopBar/BottomBar
fe387831a28b manager: standalone haze config & high contrast mode & useBackgroundSeedColor config
639e2e36b756 kernel: sync with latest susfs
8bcd0ab35bdf kernel: Replace bunch of if clauses with switch case in ksu_handle_sys_reboot()
e767e59543aa manager: Close temp shell after module action (tiann/KernelSU#3438)
542cd2bce96b docs: revive features, compatibility status, add hook mode, fix license badge (#171)
d7b47c0d1d26 ci: always do PR checks
e274ccf68b37 docs: revive metamodule notice
24bede663d9a kernel: cleanup kernel compat checks
6c094b50ead8 manager: sync translation from Crowdin (#166)
130744ccfc6c kernel: add -dirty endfix on version if has untracked change (#169)
aa9b043bac0c kernel: perf opt for throne_tracker & ensure syscalls.h only include in 5.9-
23675f295fa2 Revert "kernel: increase base.apk test performance"
2556a41d06b6 ci: Maximize the optimization of Rust cache (#168)
d857f65728fc kernel: increase base.apk test performance
cb0000a70e21 kernel: use flags for throne_tracker
b16b25040801 ci: Delete gradle build artifacts after repack
7f9e2d4e9c85 ci: let pull request checks always trigger (#167)
1580d3d10797 kernel: fix base.apk mismatch
82d85024e4eb kernel: minor performance opt for install session keyring
74b9b48bc67d manager: bump androidx.compose.foundation:foundation from 1.10.6 to 1.11.0 in /manager in the maven group (#163)
f067fdbb675e kernel: use static_key for sucompat if possible
2997fdd849de manager: fix restore-boot failed
10d73d2f1108 build(deps): bump the crates group in /userspace/ksuinit with 2 updates (#162)
e269ad3d05c8 build(deps): bump the crates group in /userspace/ksud with 21 updates (#164)
edd9f2fde8f7 kernel: lsm_hook: introduce selinux_ops LSM tampering for <4.2
196b75753912 ci: refactor manager type
2a7903624390 ci: Rename to EXPECTED_PR_BUILD_{SIZE|HASH}
4f7b76a40dfc ci: clean up code
cb7126948195 ci: sign and upload manager when pr (tiann/KernelSU#3269)
2110e7fe0bea ci: parallel build manager and other components to reduce build time (tiann/KernelSU#3393)
a4812466a7d8 kernel: fix include change (tiann/KernelSU#3428)

git-subtree-dir: drivers/sukisu
git-subtree-split: 6ee2f7fd5b3ff0a936cd39f88c9eacab698afc29
Flopster101 added a commit to FlopKernel-Series/flop_s5e8825_kernel that referenced this pull request May 28, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from 3d790eaaabe9..301b313cb7d3
6a8b1ce 
301b313cb7d3 manager: let ConfirmDialog use LazyColumn
6ee2f7fd5b3f manager: fix crash in terminal screen (tiann/KernelSU#3474)
01f5b1408ca0 manager: sync translation from Crowdin (#196)
8a13b7e84d70 ci: let crowdin action use custom PAT (#194)
52368fb6b81a ksud: make cargo clippy
4137a56416ec ksud: cleanup
f43736f4566a ksud: fix build on not aarch64/x86_64/arm android (#193)
6cf9d65b4a1f manager: refactor and modularize settings UI components
dee5e2eba874 kernel: symbol_resolver: resolve symbol suffix starts with '$'
0309ffef8f29 ksud: make cargo clippy happy
3765c0d7dbff ksud: simplify dynamic_manager errors handler and hash parser
62976fbb6f68 manager: fix crash on rapid refresh button clicks (#190)
5f702753cf3d ksud: fix some module scripts won't add KSU_MODULE environment var (tiann/KernelSU#3445)
a39b46869fd8 kernel: Prefer hashed .cfi_jt variants before bare symbols (tiann/KernelSU#3475)
f6eba76f12df mamager: add KsuFullversion to basic.txt (#189)
7d41ac68c5e3 manager: Add kallsyms in bugreport (tiann/KernelSU#3479)
fab88d00ddc6 kernel: handle backport for setprocattr and lsm name(#188)
8f2e7c387282 ci: fix upload mappings (#185)
1a2db2e96ff1 adbroot: support statically-linked GetProperty (tiann/KernelSU#3470)
b9d44a338226 kernel: refine symbol_resolver (tiann/KernelSU#3469)
c5002f5199d4 ksud: fix vendor_boot patch  (#181)
b6706363b955 kernel: fix double free when policydb_write failed
ddcf5d77c3a1 kernel, ksud, manager: implement selinux_hide feature (#179)

git-subtree-dir: drivers/sukisu
git-subtree-split: 301b313cb7d37bb8dfa9d0a827b9a7f779e6ac1c
Flopster101 added a commit to FlopKernel-Series/flop_trinket-mi_kernel that referenced this pull request May 29, 2026
@Flopster101
Squashed 'drivers/sukisu/' changes from 3d790eaaabe9..ad02c6c6b332
b0ccad7 
ad02c6c6b332 ksud: bump deps (#203)
301b313cb7d3 manager: let ConfirmDialog use LazyColumn
6ee2f7fd5b3f manager: fix crash in terminal screen (tiann/KernelSU#3474)
01f5b1408ca0 manager: sync translation from Crowdin (#196)
8a13b7e84d70 ci: let crowdin action use custom PAT (#194)
52368fb6b81a ksud: make cargo clippy
4137a56416ec ksud: cleanup
f43736f4566a ksud: fix build on not aarch64/x86_64/arm android (#193)
6cf9d65b4a1f manager: refactor and modularize settings UI components
dee5e2eba874 kernel: symbol_resolver: resolve symbol suffix starts with '$'
0309ffef8f29 ksud: make cargo clippy happy
3765c0d7dbff ksud: simplify dynamic_manager errors handler and hash parser
62976fbb6f68 manager: fix crash on rapid refresh button clicks (#190)
5f702753cf3d ksud: fix some module scripts won't add KSU_MODULE environment var (tiann/KernelSU#3445)
a39b46869fd8 kernel: Prefer hashed .cfi_jt variants before bare symbols (tiann/KernelSU#3475)
f6eba76f12df mamager: add KsuFullversion to basic.txt (#189)
7d41ac68c5e3 manager: Add kallsyms in bugreport (tiann/KernelSU#3479)
fab88d00ddc6 kernel: handle backport for setprocattr and lsm name(#188)
8f2e7c387282 ci: fix upload mappings (#185)
1a2db2e96ff1 adbroot: support statically-linked GetProperty (tiann/KernelSU#3470)
b9d44a338226 kernel: refine symbol_resolver (tiann/KernelSU#3469)
c5002f5199d4 ksud: fix vendor_boot patch  (#181)
b6706363b955 kernel: fix double free when policydb_write failed
ddcf5d77c3a1 kernel, ksud, manager: implement selinux_hide feature (#179)

git-subtree-dir: drivers/sukisu
git-subtree-split: ad02c6c6b3326dba8e248b0a9b0a74f1a9da5fc4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@5ec1cff @aviraxp