KernelSU Versions Save

We’re excited to report that we’ve delivered on the App Profile feature we promised 5 months ago! In this release, we have added an important feature to App Profile: Templates. You can create templates by yourself, import templates created by others, or directly use online templates. Templates can be directly applied to App Profile, without having to manually set each configuration! Therefore, even if you don’t understand the complex concepts in App Profile, you can easily restrict ROOT permissions through templates. In addition, welcome to contribute rules to online templates!

Changelog:

1. [Security] Fix a security issue similar to CVE-2023-5521, please upgrade as soon as possible; credits to qwerty472123@github!
2. [SU] App Profile now supports templates!
3. [Module] Fixed the bug that the module directory may be accidentally umounted, causing the manager module directory to be empty.
4. [SU] Fixed the issue where the allowlist may be messed up after an app is uninstalled.
5. [Kernel] Add android14-5.15 and android14-6.1, supporting Pixel8 series.
6. [SU] App Profile’s capability no longer requires CAP_DAC_READ_SEARCH and can run without any capability.
7. [Kernel] Fixed the bootloop issues when working with Magisk.

• [Kernel] Fixed security vulnerability.
• [Module] The GKI kernel supports automatic umount of modules to solve the problem of certain applications detecting module mount points.
• [Manager] Fixed the issue where the update log was too long causing the update dialog box to be abnormal.
• [Module] Adapt to the init process below Android 9.

• [Module] Fixed an issue that caused all modules to disappear after the installation of some modules failed.
• [Manager] Fixed the problem of incorrect module file name when updating modules.
• [Manager] It is now possible to display the changelog before module updates.
• [Manager] The changelog can also be displayed when the manager is updated.
• [Kernel] Fixed the issue where applications granted su permissions would execute certain commands abnormally.
• [Kernel] Add some newly GKI kernel branches.

• [Kernel]: Fix kernel version strings.
• [Kernel]: Fix build for 4.9 kernels.
• [Module]: Add post-mount stage for module and common scripts.
• [Module]: Fix module failed to install in some cases.
• [Manager]: Fix the bug that some modules cause the module list to be empty.

Changelog:

• [Manager] Lots of translation updates in many languages, thanks to all developers who contributed on Weblate.
• [Manager] Fixed a bug where module list doesn't show in manager under some cases.
• [Module] Boot scripts now support a new boot stage boot-completed, which will run after system finished booting, available for both common and module scripts.
• [Kernel] Kernel tasks are now queued and run in a global single thread, to avoid timing issues causing su allowlist mixup.
• [Module] Fixed a bug where flashing large modules could fail.
• [Manager] Optimized log output when installing modules in manager, UI only shows concise logs while saving detailed logs to file.
• [Module] Uninstalling modules is now delayed until next reboot, avoiding potential incomplete uninstall.
• [Manager] Added loading spinner for module operations in manager.
• [Module] Fixed a bug where common post-fs-data scripts don't run if no modules installed.
• [Manager] Fixed some untcentered prompt texts in manager.
• [SU] Fixed incorrect parameter parsing in su.
• [Manager] Module install log now auto-scrolls to bottom in manager.
• [Manager] Module install screen now automatically mutes system volume keys for module volume key selection.
• [Manager] Refreshes module list after install to avoid user confusion.
• [Kernel] Fixed keyring not installed correctly on 4.9 kernels causing modules not working.
• [Module] SELinux context of module dirs are fixed automatically on boot, avoiding some boot failures.

更新日志:

• [Manager] 大量语言的翻译更新，感谢所有在 Weblate 上贡献的开发者。
• [Manager] 修复某些情况下，管理器中模块列表全部不显示的 BUG。
• [Module] 启动脚本支持一个新的启动阶段 boot-completed，将会在系统启动完毕后执行，支持 common 和模块脚本。
• [Kernel] 内核任务使用全局单线程排队执行，避免时序问题导致 su 允许列表错乱。
• [Module] 修复刷入大体积模块可能会失败的 BUG。
• [Manager] 优化管理器中模块刷入时的日志输出，用户界面仅显示简洁日志，保存时文件写入详细日志。
• [Module] 卸载模块改为下次重启时执行，避免卸载可能不干净的问题。
• [Manager] 管理器中模块操作添加加载等待框。
• [Module] 修复没有安装模块时，common post-fs-data 脚本不执行的 BUG。
• [Manager] 修复管理器中若干提示文字没有居中的问题。
• [SU] 修复 su 参数解析不对的问题。
• [Manager] 管理器中安装模块时，输出日志自动滚动到底部。
• [Manager] 管理器中安装模块界面，自动屏蔽系统音量键，方便模块进行音量键选择。
• [Manager] 模块安装完毕后，刷新模块界面，避免用户误以为没有安装。
• [Kernel] 修复 4.9 上内核 keyring 没有正确安装导致模块无法使用的问题。
• [Module] 系统启动时，自动修复模块目录的 SELinux Context，避免部分启动失败问题。

Changelog：

1. Translation updated, add Spanish.
2. Allow kernel to mount loop device, enhanced compatibility with modules.
3. App profile now supports setting sepolicy rules.
4. support the case that init_task.mnt_ns != zygote.mnt_ns, fix WSA profile saving.
5. Fixed the problem of repeated installation when pressing the return button when installing modules.
6. Other improvements and fixes.

更新日志：

1. 更新翻译，新增西班牙语翻译
2. 允许内核挂载回环设备，增强模块系统兼容性。
3. 现在App profile支持设置sepolicy rules。
4. 支持init和zygote mnt namespace不同的情况，修复WSA无法保存配置的问题。
5. 修复安装模块时按返回键循环重复安装的问题。
6. 其他更多细节优化和修正。

1. Support online updates for modules and manager.
2. Fix the potential issue of umount failing.
3. Harden the signature verification of the manager.

Initial support for App Profile!

By setting appropriate UID, GID, groups, and capabilities (as well as the upcoming SELinux) for the apps that require root privileges, you can exercise more fine-grained control over these permissions. For instance, you can grant file manager-related permissions for read-write access and deny dangerous permissions like ptrace. You can also downgrade root privileges for apps like Ice Box to shell or system privileges. Open KernelSU's manager and begin setting up your App Profiles!

1. Support for several languages.
2. Fixed a bug where the kernel umount may fail.
3. Fixed a bug where REPLACE in modules may not take effect.
4. Fixed a problem where x86_64 devices may not work.
5. Fixed some issues with module mounting.