8d31bd3e5adf312f29a04352e183aa976bd06511
These two permission is absolutely required: - CAP_NET_ADMIN is needed for modifying routes. - CAP_NET_RAW is for modifying iptables. When the app starts to set up a tunnel, it seems to execute "cat /sys/module/wireguard/version" to check if wireguard kernel module is loaded or not. Despite the permission seems okay, without CAP_DAC_READ_SEARCH it could not read the version number and threw an error in the application log. CAP_DAC_OVERRIDE is needed optionally for installing Wireguard command line tools. It could be turned back off once the binaries have been copied.
English | Español | 简体中文 | 繁體中文 | 日本語 | 한국어 | Polski | Português (Brasil) | Türkçe | Русский | Tiếng Việt | Indonesia | עברית | हिंदी | Italiano
KernelSU
A Kernel-based root solution for Android devices.
Features
- Kernel-based
suand root access management. - Module system based on OverlayFS.
- App Profile: Lock up the root power in a cage.
Compatibility State
KernelSU officially supports Android GKI 2.0 devices (kernel 5.10+). Older kernels (4.14+) are also compatible, but the kernel will have to be built manually.
With this, WSA, ChromeOS, and container-based Android are all supported.
Currently, only arm64-v8a and x86_64 are supported.
Usage
Translation
To help translate KernelSU or improve existing translations, please use Weblate. PR of Manager's translation is no longer accepted, because it will conflict with Weblate.
Discussion
- Telegram: @KernelSU
Security
For information on reporting security vulnerabilities in KernelSU, see SECURITY.md.
License
- Files under the
kerneldirectory are GPL-2.0-only. - All other parts except the
kerneldirectory are GPL-3.0-or-later.
Credits
- kernel-assisted-superuser: the KernelSU idea.
- Magisk: the powerful root tool.
- genuine: apk v2 signature validation.
- Diamorphine: some rootkit skills.
Languages
Kotlin
67.1%
C
20%
Rust
11.1%
Shell
0.9%
Makefile
0.4%
Other
0.4%