What's Changed

• kernel: sulog: fix return value by @5ec1cff in #3364
• manager: Disable icon shrinking in AppIconCache by @HChenX in #3371
• kernel: bump app profile version, migrate selinux domain by @5ec1cff in #3363
• manager: add sulog screen by @KOWX712 in #3373
• Translations update from Hosted Weblate by @weblate in #3370
• ksud: minor refactor by @5ec1cff in #3377
• kernel: mark more functions as init/exit functions by @5ec1cff in #3380
• ksud: Change uid references to appid by @aviraxp in #3388
• feature: adb root by @5ec1cff in #3382
• kernel: Don't advertise webview zygote in umount list by @aviraxp in #3389
• kernel: fix path check in adb root by @5ec1cff in #3391
• kernel: Fix absolute src handling in Kbuild by @u9521 in #3390
• syscall_hook: Fix building on kernel 6.6 and below by @hmtheboy154 in #3383
• ci: parallel build manager and other components to reduce build time by @5ec1cff in #3393
• docs: Fix formatting of best practice guidelines by @zhroc in #3376
• manager: show seccomp status on Home screen by @ljxi in #3372

New Contributors

• @HChenX made their first contribution in #3371
• @zhroc made their first contribution in #3376
• @ljxi made their first contribution in #3372

Full Changelog: v3.2.2...v3.2.3

What's Changed

• Translations update from Hosted Weblate by @weblate in #3202
• manager: Skip service start if root is available by @aviraxp in #3343
• kernel: fix compile for x86-64 linux kernel v6.13- by @AlexLiuDev233 in #3351
• kernel: fix copy avtab by @5ec1cff in #3352
• ksud: sepolicy: fix *xperm parsing, support bracket for perm_set by @5ec1cff in #3353

Full Changelog: v3.2.1...v3.2.2

What's Changed

• ksud: fork daemon to run late-load mode by @5ec1cff in #3334
• ci: build / clippy check ksud for android without cross, use ndk 29 by @5ec1cff in #3251
• manager: add haptic feedback to Material UI by @Doddddd in #3335
• manager: Avoid touching CE storage if not unlocked by @aviraxp in #3337
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #3336
• build(deps): bump the crates group across 1 directory with 46 updates by @dependabot[bot] in #3324
• build(deps): bump the npm group across 1 directory with 29 updates by @dependabot[bot] in #3260
• build(deps): bump gradle-wrapper from 9.4.0 to 9.4.1 in /manager in the maven group across 1 directory by @dependabot[bot] in #3323
• build(deps): bump the crates group across 1 directory with 9 updates by @dependabot[bot] in #3221
• kernel_umount: fixup printout and avoid UAF by @backslashxx in #3338
• manager: fix remember icon by @myflavor in #3339

New Contributors

• @Doddddd made their first contribution in #3335
• @myflavor made their first contribution in #3339

Full Changelog: v3.2.0...v3.2.1

What's Changed

• manager: Add predictive back gesture switch by @YuKongA in #3208
• kernel: use correct errno when add_try_umount failed by @AlexLiuDev233 in #3212
• kernel: use rcu to access allowlist, refactor get allowlist api by @5ec1cff in #3093
• kernel: Avoid malloc in remove_uid_from_arr() by @aviraxp in #3099
• manager: cleanup Downloader and fix warnings by @u9521 in #3229
• manager: fix crashes when loading ultra-high resolution app icons by @u9521 in #3227
• manager: fix multi-user app management and add filtering by @u9521 in #3232
• manager: Refactor ViewModels with repository pattern and StateFlow by @YuKongA in #3241
• kernel: Use ksu cred to save allowlist by @aviraxp in #3243
• manager: restructure for multi-ui support and add Material 3 by @KOWX712 in #3231
• Add additional capabilities to nethunter.root by @Loukious in #3252
• ksud & ksuinit: fix wrong GetInfoCmd struct by @5ec1cff in #3256
• manager: cleanup multi-ui issue by @KOWX712 in #3246
• kernel: Only check CONFIG_STACKPROTECTOR_PER_TASK on arm64 by @hmtheboy154 in #3263
• kernel: refine stackprotector workaround by @5ec1cff in #3264
• feat: add late-load mode support by @tiann in #3258
• ci: sign and upload manager when pr by @Ylarod in #3269
• manager: Revert remove shortcut_type intent's extra by @lamprose in #3267
• feat: jailbreak by Magica by @Ylarod in #3268
• kernel: sepolicy: use GFP_KERNEL by @5ec1cff in #3271
• manager: Add soft reboot by @YuKongA in #3272
• manager: fix some issue in Material theme by @KOWX712 in #3277
• manager: Bump min sdk to 31 by @aviraxp in #3276
• [add device]: All Huawei & Honor devices (Project:KernelSU_on_Huawei) by @xixiaobei-bei in #3242
• manager: Add NavigationRail support by @YuKongA in #3279
• kernel: upgrade ddk, use ddk-min by @5ec1cff in #3280
• manager: Refactor manager screens to unified UiState and actions by @u9521 in #3283
• kernel: Fix RLIMIT_NPROC leak on root escape by @5ec1cff in #3286
• feat: add long-click to create module shortcut by @serein-213 in #3285
• Update KSU config to require EXT4_FS by @shadichy in #3266
• manager: clean up intent leftover by @KOWX712 in #3294
• ksud: refine boot-patch by @5ec1cff in #3281
• manager: Change jailbreak mode tag color to errorContainer for better… by @dabao1955 in #3290
• ksud: magica: use minify adb_client by @5ec1cff in #3292
• ksud: magica: Set uid in forked process by @aviraxp in #3296
• manager: do not save image when flashing by @5ec1cff in #3297
• manager: jail break mode check up by @KOWX712 in #3302
• ksud: embeded resetprop impl by @Ylarod in #3300
• ksud: magica: Delete ro.boot.selinux and compact after run by @aviraxp in #3314
• kernel: fix process marking for built-in mode by @MhmRdd in #3284
• feat: ksud-managed emulated soft reboot by @5ec1cff in #3291
• feat: support switch to init_group by @5ec1cff in #3322
• ksud: refine resetprop cli by @5ec1cff in #3330
• manager: implement foreground service for module downloads by @YuKongA in #3326
• Bring back x86_64 support with a catch by @hmtheboy154 in #3328
• supercall: perform free_pid() calls for kernel 6.15+ by @hmtheboy154 in #3331

New Contributors

• @Loukious made their first contribution in #3252
• @xixiaobei-bei made their first contribution in #3242
• @serein-213 made their first contribution in #3285
• @MhmRdd made their first contribution in #3284

Full Changelog: v3.1.0...v3.2.0

What's Changed

• manager: fix webui load indefenitely if app list is not initialized by @KOWX712 in #3012
• kernel: Move kernel part build rules from Makefile to Kbuild by @dabao1955 in #3003
• ksud: Add process info in bugreport by @aviraxp in #3014
• kernel: Remove second stage init handling for old system by @aviraxp in #3017
• ksud: more verbose log by @5ec1cff in #3021
• Fix another id_ID Translation by @CEKIKOFGAMERS in #3015
• kernel: Remove sepolicy of kernel domain by @aviraxp in #3019
• kernel: escape to ksu domain in execve hook, remove sepolicy between … by @5ec1cff in #3031
• support kernel 6.18 by @aaaaaaaa-815 in #2999
• kernel: use our cred to unmount, remove sepolicy of zygote by @5ec1cff in #3032
• manager: filter ksuapp in superuser screen by @KOWX712 in #3033
• templates: add hyperceiler root template by @sakana164 in #3036
• kernel: check lkm symbols by @5ec1cff in #3035
• manager: add missing filtering in superuser page by @KOWX712 in #3039
• kernel: use $(CC) for check_symbol target by @dabao1955 in #3041
• ci: add ksuinit by @Dr-TSNG in #3026
• ci: Run rust checks for ksuinit and fix them by @aviraxp in #3043
• kernel: Identify manager without PER_USER_RANGE by @aviraxp in #3038
• kernel: Use GFP_ATOMIC for atomic context by @aviraxp in #3052
• refactor(ksud): extract android-only logic by @5ec1cff in #3048
• ci: move ksuinit build to a single workflow by @5ec1cff in #3054
• kernel: Install manager fd in task work by @aviraxp in #3057
• ksud: Decrease log level on release build by @aviraxp in #3058
• manager: Refactor Markdown composable to use FrameLayout by @aviraxp in #3059
• kernel: reformat codes, add workflow to check format by @5ec1cff in #3062
• ci: Correct the file paths checked by clang-format; change trigger path in clang-format workflow by @dabao1955 in #3063
• remove some unused files by @u9521 in #3034
• fix manager crash when switch pages too fast by @u9521 in #3065
• Add mount namespace support 添加挂载命名空间支持 by @u9521 in #2909
• kernel: fix root_groups defs by @aaaaaaaa-815 in #3028
• kernel: fix check format again by @5ec1cff in #3071
• kernel: Refactor file_wrapper by @5ec1cff in #3070
• kernel: setuid_hook: Remove unused includes and function by @rsuntk in #3072
• kernel: release seccomp filter by @5ec1cff in #3077
• kernel: Allocate fake struct on heap by @aviraxp in #3081
• manager: Fix marking refresh on module install and update by @aviraxp in #3082
• manager: Prevent module installation via external sources in safe mode by @sakana164 in #3079
• manager: add webview padding if no request from insets css by @KOWX712 in #3083
• js: add insets documentation and function by @KOWX712 in #3084
• kernel: fix kvrealloc compatibility by @5ec1cff in #3089
• ksuinit: update dependencies and migrate to 2024 by @CanerKaraca23 in #3088
• ksuinit: use upstream by @CanerKaraca23 in #3095
• manager: fix all warnings by @CanerKaraca23 in #3098
• ksud: update dependencies by @CanerKaraca23 in #3096
• Revert "ksuinit: use upstream" by @yujincheng08 in #3104
• Revert "Revert "ksuinit: use upstream"" by @aviraxp in #3105
• kernel: append to init.rc instead of prepending to atrace.rc by @5ec1cff in #3107
• kernel: use selinux_cred() method instead of directly use cred->security by @AlexLiuDev233 in #3111
• Translations update from Hosted Weblate by @weblate in #3049
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #3067
• kernel: Ensure manager is valid before installing fd by @aviraxp in #3115
• manager: expose exit to javascript interface by @KOWX712 in #3112
• kernel: fix Wcalloc-transposed-args by @aaaaaaaa-815 in #3121
• workflow: remove unnecessary strings by @CanerKaraca23 in #3120
• kernel, ksud, manager: Remove enhanced security feature by @aviraxp in #3123
• kernel: Explicitly check zygote start in execve hook by @aviraxp in #3113
• manager: fix ksu.fullScreen by @KOWX712 in #3126
• selinux: Cache SID lookups for domain checks by @0xSecureByte in #3128
• kerenl: check package name before check manager signature by @u9521 in #3134
• manager: add file chooser support to WebUI by @KOWX712 in #3139
• manager: Fix a crash by @YuKongA in #3140
• kernel: Clean up selinux.c by @s-b-repo in #3132
• ksud: Update resetprop from Magisk v30.6 by @aviraxp in #3144
• Translations update from Hosted Weblate by @weblate in #3124
• kernel: Fixing symbol names causing x64 kernel compilation failure by @u9521 in #3147
• Update arch.h by @aviraxp in #3148
• kernel: improve Git repository detection for KernelSU versioning by @dabao1955 in #3108
• manager: remove Coil dependency and add OkHttp directly by @u9521 in #3154
• kernel: add bazel workaround back by @5ec1cff in #3157
• manager: Add expandable module description support by @YuKongA in #3161
• manager/userspace: Add desktop shortcut support for module action/webui by @YuKongA in #3159
• manager(refactor): change kernel umount to a switch preference, figure the sucompte string problem by @MiRinChan in #3146
• manager: Migrate to navigation3 + navigationevent by @YuKongA in #3164
• build(deps): bump the maven group across 1 directory with 2 updates by @dependabot[bot] in #3163
• Fix Potential Memory leaks. by @fatalcoder524 in #3170
• fix(webui): The internal/colors.css is empty source when WebUIActivity started by shortcut by @lamprose in #3172
• manager: Navgation3 improve by @u9521 in #3175
• manager: check module status before executing action or WebUI by @u9521 in #3179
• manager: Reduce recomposition on the home screen by @YunZiA in #3180
• kernel: Fix setup_selinux using __task_cred directly by @jsoltan226 in #3189
• manager: Allow patching for devices with other different KMI versions by @u9521 in #3185
• manager: Refactor WebUI to Compose & Rename enableInsets to enableEdgeToEdge by @u9521 in #3190
• Translations update from Hosted Weblate by @weblate in #3145
• manager: optimize BottomBar pagescroll animation by @u9521 in #3196
• manager: add animation to page back navigation by @u9521 in #3197
• manager: Fix some recomposition issues by @YuKongA in #3198
• manager: Refactor OEM detection for shortcut permission by @YuKongA in #3201
• Translations update from Hosted Weblate by @weblate in #3200

New Contributors

• @0xSecureByte made their first contribution in #3128
• @s-b-repo made their first contribution in #3132
• @MiRinChan made their first contribution in #3146
• @fatalcoder524 made thei...

Highlights:

1. Breaking Change: After upgrading to 3.0, you need to reinstall all modules, refer: metamodule
2. Official Module Repository: https://modules.kernelsu.org/

1. 重大变更：升级到 3.0 后需要重新安装所有模块，参考：元模块
2. 官方模块仓库：https://modules.kernelsu.org/

What's Changed

• feat(ksud): Optimize ensure_dir_exist and do not hardcode path by @Tools-cx-app in #2932
• kernel: Prune allowlist only after boot completed by @aviraxp in #2922
• manager: display the same UID as a group by @YuKongA in #2933
• manager: fix webui package manager by @YuKongA in #2934
• kernel: no need to remark process on post-fs-data and boot-completed by @5ec1cff in #2935
• kernel: file_wrapper: copy mode of original inode by @5ec1cff in #2937
• kernel: Replace kmalloc() usages with kzalloc() by @aviraxp in #2939
• support metamodule, remove built-in overlayfs mount by @Ylarod in #2929
• ksud: add modules_update back by @5ec1cff in #2948
• kernel/ksud: Fix KSU_IOCTL_NUKE_EXT4_SYSFS definition by @aviraxp in #2949
• kernel: expose umount list to ioctl interface by @backslashxx in #2950
• manager: add inset support to webui by @KOWX712 in #2952
• Add undo uninstall module feature 添加撤销卸载模块功能 by @u9521 in #2920
• Translations update from Hosted Weblate by @weblate in #2917
• Add meta-overlayfs to Dependabot by @CanerKaraca23 in #2956
• add module config, migrate managedFeatures by @Ylarod in #2965
• ksud: Use regex to validate module id by @aviraxp in #2968
• chore(ksud): enable clippy::all, clippy::pedantic && make clippy happy by @Tools-cx-app in #2970
• manager: add support for opening and flashing zip files directly by @sakana164 in #2967
• build(deps): bump androidx.activity:activity-compose from 1.11.0 to 1.12.0 in /manager in the maven group across 1 directory by @dependabot[bot] in #2964
• ksud: Set KSU_MODULE only for module script by @aviraxp in #2971
• kernel: Unmount all isolated process which forks from zygote by @aviraxp in #2972
• Remove meta-overlayfs from Dependabot by @CanerKaraca23 in #2974
• ksud: refine boot patch, add --out-name arg to boot-patch and boot-restore command by @5ec1cff in #2982
• kernel: Remove unreachable vfs_statx handling by @aviraxp in #2987
• manager: Add confirmation dialog for ZIP module installation via external sources by @sakana164 in #2989
• manager: provide monet color to webui by @KOWX712 in #2981
• Translations update from Hosted Weblate by @weblate in #2963
• add hasFragileUserData to keep manager data when uninstall by @u9521 in #3005

New Contributors

• @Tools-cx-app made their first contribution in #2932

Full Changelog: v2.1.2...v3.0.0

Highlights

New sucompat implementation, fixed a large number of related side-channel attacks

What's Changed

• Translations update from Hosted Weblate by @weblate in #2636
• Fix legacy prctl check condition by @aviraxp in #2864
• kernel: supercall: allow escalation on ioctl interface by @backslashxx in #2862
• Support building for kernel 6.14+ by @hmtheboy154 in #2662
• support mainline kernel by @aaaaaaaa-815 in #2869
• kernel: use sys_enter tracepoint for sucompat by @Ylarod in #2866
• Update Kernel Patches by @CanerKaraca23 in #2868
• fix: mark tif by @Ylarod in #2871
• fix sepolicy patch hint by @Ylarod in #2872
• feature: add enhanced security by @Ylarod in #2873
• manager: some ui changes by @YuKongA in #2870
• fix: sucompat by @Ylarod in #2874
• Translations update from Hosted Weblate by @weblate in #2875
• Revert "kernel: remove unused workqueue" by @aviraxp in #2877
• Translations update from Hosted Weblate by @weblate in #2876
• Replace mutex with spinlock for tracepoint registration by @aviraxp in #2882
• Switch kretprobe to heap by @aviraxp in #2880
• kernel: Refactor selinux/selinux.c by @shadichy in #2881
• Clean up kernel code by @aviraxp in #2898
• manager: install: add choose partition support by @YuKongA in #2896
• manager: if manager incompatible with current kernel, don't save ksud by @AlexLiuDev233 in #2895
• website: fix Japanese translation of installation guide by @kitadai31 in #2897
• manager: simplify find boot image by @tiann in #2901
• manager: Fix export log toast crash by showing Toast on main thread by @suqi8 in #2904
• kernel: Use task work to install fd by @aviraxp in #2905
• Translations update from Hosted Weblate by @weblate in #2879
• manager: 修复模板状态显示问题 by @u9521 in #2910
• kernel: Fix task flag marking for root and shell UID by @aviraxp in #2913
• kernel: fix zygote mark on first boot by @tiann in #2924
• kernel: refine syscall_hook_manager by @5ec1cff in #2925
• manager: introduce webui package manager api by @KOWX712 in #2928
• js: provide package manager function and documentation by @KOWX712 in #2930
• ci: fix android16-6.12 gki build by @tiann in #2931

New Contributors

• @shadichy made their first contribution in #2881
• @kitadai31 made their first contribution in #2897
• @suqi8 made their first contribution in #2904
• @u9521 made their first contribution in #2910
• @KOWX712 made their first contribution in #2928

Full Changelog: v2.0.0...v2.1.2

Highlights

1. New supercall implementation: remove the tricky LSM hook with seccomp and ioctl, avoiding numerous side-channel attacks.
2. Support for kernel 6.12 and above.
3. Brand new theme.

What's Changed

• ci: Update lkm kernel version by @dabao1955 in #2567
• manager: hide root related features if kernelsu not available by @rsuntk in #2555
• kernel/throne_tracker: we just uninstalled the manager, stop looking for it by @backslashxx in #2584
• Translations update from Hosted Weblate by @weblate in #2558
• build(deps): bump the npm group across 1 directory with 24 updates by @dependabot[bot] in #2586
• build(deps): bump the crates group across 1 directory with 53 updates by @dependabot[bot] in #2585
• build(deps): bump the maven group across 1 directory with 12 updates by @dependabot[bot] in #2579
• ksud/installer: /odm handling by @backslashxx in #2513
• ci: update kmi versions by @ukriu in #2591
• Update zip-extensions and set needed features for zip by @aviraxp in #2592
• Fix fallback option for createRootShell() by @aviraxp in #2593
• Add a formatting string for the update list #2556 by @ShirkNeko in #2597
• build(deps): bump the maven group across 1 directory with 4 updates by @dependabot[bot] in #2612
• throne_tracker: avoid cross fs access by @aviraxp in #2626
• Switch to prepare_creds/commit_creds by @aviraxp in #2631
• kernel: throne_tracker: avoid cross-fs traversal using s_magic check by @backslashxx in #2633
• Translations update from Hosted Weblate by @weblate in #2587
• build(deps): bump the maven group across 1 directory with 7 updates by @dependabot[bot] in #2629
• kernel: core_hook: fix refcount leaks on try_umount by @rsuntk in #2635
• manger: fix lkm detection by @HSSkyBoy in #2654
• kernel: selinux: rules: Fix illegal RCU lock usage in apply_kernelsu_rules() by @Tashar02 in #2646
• kernel: added new prctl CMD_GET_MANAGER_UID to get the uid of the crowned manager by @rifsxd in #2673
• feat(ui): improve predictive back animations by @wxxsfxyzm in #2675
• ksud: make clippy happy by @5ec1cff in #2683
• ksud: support vendor_boot patching for some odd devices by @ukriu in #2650
• Update resetprop from Magisk v30.2 by @aviraxp in #2700
• kernel: selinux: rules: Micro-optimize get_policydb() and fix illegal RCU lock usage in handle_sepolicy() by @Tashar02 in #2695
• Reset seccomp filter count when escaping to root by @aviraxp in #2708
• Handle unmount for isolated process correctly by @aviraxp in #2696
• Revert "Handle unmount for isolated process correctly" by @Ylarod in #2718
• manager: switch ui to miuix design style by @YuKongA in #2710
• manager: fix button issues in module cards by @YuKongA in #2719
• manager: Fix some issues by @YuKongA in #2725
• manager: Add uninstall 2nd confirm by @YuKongA in #2729
• manager: Support search module by @YuKongA in #2730
• Strip JNI debug logs on release build by @aviraxp in #2732
• Add files via upload by @aviraxp in #2733
• fix 'for' loop problem by @aaaaaaaa-815 in #2745
• Unmount isolated process which forks from zygote unconditionally by @aviraxp in #2747
• Tweak shizuku template description by @aviraxp in #2746
• Revert "Unmount isolated process which forks from zygote unconditionally" by @yujincheng08 in #2776
• manager: Refactor module and superuser UI by @YuKongA in #2783
• manager: Allow module update info to scroll naturally by @YuKongA in #2784
• Don't write newline character to cgroup node by @aviraxp in #2804
• remove ksu tmp by @Ylarod in #2815
• Fix kernel panics caused by thread info flag corruption by @kerneltoast in #2818
• ci: use ddk for faster ci, manual gki image build by @Ylarod in #2817
• Fix incorrect function names in non-GKI integration documentation by @Copilot in #2722
• kernel: fix out-of-tree building by @Ylarod in #2819
• ci: move workflows to top-level and fix workflow references by @sakana164 in #2828
• initial fastlane structures from IzzyOnDroid by @IzzySoft in #2715
• templates: update translation by @igormiguell in #2761
• Add another translation in id_ID by @CEKIKOFGAMERS in #2797
• ci: Fix LKM version number anomaly and Git ownership issues by @Prslc in #2832
• manager: add kernel_umount switch by @YuKongA in #2848
• update ioctl macro by @Ylarod in #2850
• ci: build dev manager by @Ylarod in #2851
• Reapply: "kernel: Allow to use in Private Space" by @backslashxx in #2857

New Contributors

• @ShirkNeko made their first contribution in #2597
• @HSSkyBoy made their first contribution in #2654
• @Tashar02 made their first contribution in #2646
• @wxxsfxyzm made their first contribution in #2675
• @aaaaaaaa-815 made their first contribution in #2745
• @kerneltoast made their first contribution in #2818
• @Copilot made their first contribution in #2722
• @sakana164 made their first contribution in #2828
• @IzzySoft made their first contribution in #2715
• @CEKIKOFGAMERS made their first contribution in #2797
• @Prslc made their first contribution in #2832

Full Changelog: v1.0.5...v2.0.0