disabling this removes the need for LSM_HOOK_INIT, security_add_hooks and such,. furthermore, this will also allow easier integration on pre-4.1 kernels. Expose this and make it a configurable option. Signed-off-by: backslashxx <118538522+backslashxx@users.noreply.github.com>
67 lines
1.7 KiB
Plaintext
67 lines
1.7 KiB
Plaintext
menu "KernelSU"
|
|
|
|
config KSU
|
|
tristate "KernelSU function support"
|
|
default y
|
|
help
|
|
Enable kernel-level root privileges on Android System.
|
|
To compile as a module, choose M here: the
|
|
module will be called kernelsu.
|
|
|
|
config KSU_DEBUG
|
|
bool "KernelSU debug mode"
|
|
depends on KSU
|
|
default n
|
|
help
|
|
Enable KernelSU debug mode.
|
|
|
|
config KSU_64BIT
|
|
bool "KernelSU 64bit compat"
|
|
depends on KSU && 64BIT
|
|
default y
|
|
help
|
|
Enable this if you have a 32-bit userspace or armv8l.
|
|
|
|
config KSU_ALLOWLIST_WORKAROUND
|
|
bool "KernelSU Session init keyring workaround"
|
|
depends on KSU
|
|
default n
|
|
help
|
|
Enable session keyring init workaround for problematic devices.
|
|
Useful for situations where the SU allowlist is not kept after a reboot.
|
|
|
|
config KSU_CMDLINE
|
|
bool "Enable KernelSU cmdline"
|
|
depends on KSU && KSU != m
|
|
default n
|
|
help
|
|
Enable a cmdline called kernelsu.enabled
|
|
Value 1 means enabled, value 0 means disabled.
|
|
|
|
config KSU_MANUAL_HOOK
|
|
bool "Manual hooking GKI kernels without kprobes"
|
|
depends on KSU && KSU != m
|
|
default y if !KPROBES
|
|
default n
|
|
help
|
|
If enabled, Hook required KernelSU syscalls with manually-patched function.
|
|
If disabled, Hook required KernelSU syscalls with Kernel-probe.
|
|
|
|
config KPM
|
|
bool "Enable SukiSU KPM"
|
|
default n
|
|
help
|
|
Enabling this option will activate the KPM feature of SukiSU.
|
|
This option is suitable for scenarios where you need to force KPM to be enabled.
|
|
but it may affect system stability.
|
|
|
|
config KSU_LSM_SECURITY_HOOKS
|
|
bool "use lsm security hooks"
|
|
depends on KSU
|
|
default y
|
|
help
|
|
Disabling this is mostly only useful for kernel 4.1 and older.
|
|
Make sure to implement manual hooks on security/security.c.
|
|
|
|
endmenu
|