# tiann/KernelSU **Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/tiann-kernelsu).** 15,041 stars · 3,136 forks · Kotlin · gpl-3.0 ## Links - GitHub: https://github.com/tiann/KernelSU - Homepage: https://kernelsu.org - awesome-repositories: https://awesome-repositories.com/repository/tiann-kernelsu.md ## Topics `android` `kernel` `kernelsu` `root` `su` ## Description KernelSU is a kernel-based root management framework for Android that provides administrative access to applications by operating directly within the operating system kernel. By integrating management logic into the kernel source, it enables system-wide permission control through syscall interception and function patching. This approach allows for the enforcement of fine-grained mandatory access control, assigning custom security domains to root processes to restrict their capabilities and prevent unauthorized actions. The project distinguishes itself through a systemless modification architecture that applies changes to the system partition using virtual filesystem overlays, ensuring the underlying storage remains unaltered. It includes robust security features such as namespace-isolated module execution, which hides modifications from specific applications to maintain compatibility. To ensure system stability, the framework implements an automated boot-time recovery mechanism that can disable active modules or bypass modifications if the device fails to initialize correctly. Beyond core root management, the platform provides a comprehensive infrastructure for system customization and automation. It supports the execution of boot-time scripts, standardized shell environments, and a pluggable module system that allows users to manage persistent configurations and dynamic metadata. The framework also includes tools for rendering interactive interfaces and managing module lifecycles, providing a structured environment for both legacy device support and modern system-level configuration. ## Tags ### Operating Systems & Systems Programming - [Kernel Root Management](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/operating-system-kernels/kernel-root-management.md) — Provides administrative access to userspace applications by operating directly within the kernel space of the operating system. - [Kernel-Mode Interception Mechanisms](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/operating-system-kernels/kernel-mode-interception-mechanisms.md) — Monitors and modifies system operations by hooking into the kernel syscall table to enforce security policies. - [Kernel Patching Utilities](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/system-administration-utilities/system-modification-frameworks/kernel-patching-utilities.md) — Injects management logic into the kernel source tree at compile time to enable deep system control and root access. - [Systemless Modification Layers](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/system-administration-utilities/system-modification-frameworks/systemless-modification-layers.md) — Provides systemless modification layers that overlay virtual filesystems to modify read-only partitions without altering core system files. ([source](https://kernelsu.org/guide/module.html)) - [Permission Controllers](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/operating-system-kernels/permission-controllers.md) — Grants administrative access to userspace applications by validating identity and capabilities directly within the operating system kernel. - [Kernel Module Injectors](https://awesome-repositories.com/f/operating-systems-systems-programming/hardware-interfacing-drivers/hardware-drivers/graphics-drivers/kernel-driver-injection/kernel-extension-loaders/kernel-module-injectors.md) — Loads a kernel module to enable root access without modifying the original device kernel or boot partition. ([source](https://kernelsu.org/guide/installation.html)) - [Permission Controllers](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/operating-system-kernels/kernel-mode-interception-mechanisms/kernel-level-traffic-interceptors/permission-controllers.md) — Manages superuser privileges by injecting hooks into the kernel source to monitor and control process behavior. - [System Recovery Tools](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/system-administration-utilities/system-recovery-tools.md) — Provides a boot-time recovery mechanism to bypass kernel modifications or disable modules if the system fails to initialize correctly. ([source](https://kernelsu.org/guide/rescue-from-bootloop.html)) - [Automated Recovery Mechanisms](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/system-administration-utilities/system-recovery-tools/recovery-modes/automated-recovery-mechanisms.md) — Implements a fallback mechanism that disables all active kernel modifications if the system fails to initialize correctly. - [Boot Recovery Workflows](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-core-internals/boot-startup-management/boot-device-selectors/boot-recovery-workflows.md) — Implements automated boot-time recovery mechanisms to disable active modules or bypass modifications if the device fails to initialize correctly. - [Kernel Root Deployment Systems](https://awesome-repositories.com/f/operating-systems-systems-programming/kernel-root-deployment-systems.md) — Replaces the device kernel with a generic image to establish root access across a wide range of hardware configurations. ([source](https://kernelsu.org/guide/installation.html)) - [Legacy Device Support](https://awesome-repositories.com/f/operating-systems-systems-programming/legacy-device-support.md) — Applies community-maintained kernel source code to enable root functionality on older devices that no longer receive official updates. ([source](https://kernelsu.org/guide/unofficially-support-devices.html)) - [Kernel Extension Loaders](https://awesome-repositories.com/f/operating-systems-systems-programming/hardware-interfacing-drivers/hardware-drivers/graphics-drivers/kernel-driver-injection/kernel-extension-loaders.md) — Supports loading kernel-level components after the operating system has fully initialized to accommodate hardware requirements. ([source](https://kernelsu.org/guide/module.html)) - [System Partition Modifiers](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/file-system-management/file-system-utilities/system-partition-modifiers.md) — Enables the installation of additional modules to facilitate persistent changes to system files and partitions. ([source](https://kernelsu.org/guide/installation.html)) - [Shells & Scripting](https://awesome-repositories.com/f/operating-systems-systems-programming/terminal-command-line-environments/shells-scripting.md) — Provides a consistent shell environment for running installation and boot scripts to ensure predictable command behavior. ([source](https://kernelsu.org/guide/module.html)) ### Mobile Development - [Android Rooting Frameworks](https://awesome-repositories.com/f/mobile-development/android-ecosystem/android-rooting-frameworks.md) — Provides a kernel-based root management framework that grants administrative access to applications by intercepting system calls. - [Security Policy Managers](https://awesome-repositories.com/f/mobile-development/mobile-infrastructure-security/mobile-security-tools/android-security-tools/security-policy-managers.md) — Enforces fine-grained mandatory access control and restricts root capabilities for processes via custom security domains. - [Module Infrastructure Managers](https://awesome-repositories.com/f/mobile-development/android-ecosystem/android-libraries/module-infrastructure-managers.md) — Extends system functionality through a pluggable architecture that applies modifications to partitions without altering the underlying system files. ### Security & Cryptography - [Access Management](https://awesome-repositories.com/f/security-cryptography/access-management.md) — Provides administrative access to userspace applications by operating directly within the kernel space of the operating system. ([source](https://kernelsu.org/guide/installation.html)) - [Security Policy Enforcers](https://awesome-repositories.com/f/security-cryptography/infrastructure-policy-enforcement/security-policy-enforcers.md) — Assigns custom security domains to root processes to enforce fine-grained mandatory access control policies on a per-application basis. - [Mandatory Access Control](https://awesome-repositories.com/f/security-cryptography/mandatory-access-control.md) — Assigns custom security domains to root processes to enforce fine-grained mandatory access control policies. - [Privileged Access Management](https://awesome-repositories.com/f/security-cryptography/privileged-access-management.md) — Configures user and group identifiers for root processes to limit the system resources and permissions accessible to specific applications. ([source](https://kernelsu.org/guide/app-profile.html)) ### DevOps & Infrastructure - [Kernel Integration Frameworks](https://awesome-repositories.com/f/devops-infrastructure/cicd-pipeline-automation/core-build-engines/configuration-lifecycle-management/build-configuration/source-path-registrations/kernel-build-systems/kernel-integration-frameworks.md) — Injects management capabilities directly into the kernel source during the build process to enable system-wide permission control. ([source](https://kernelsu.org/guide/how-to-build.html)) - [Module Configuration Stores](https://awesome-repositories.com/f/devops-infrastructure/configuration-management/application-settings-management/application-module-configuration/module-configuration-stores.md) — Maintains persistent or temporary key-value settings for modules to preserve user preferences across reboots. ([source](https://kernelsu.org/guide/module-config.html)) ### Software Engineering & Architecture - [Module Isolation](https://awesome-repositories.com/f/software-engineering-architecture/execution-control/namespace-isolation/module-isolation.md) — Manages system modifications by unmounting kernel modules from specific process namespaces to hide changes from detection. - [Boot-Time Task Execution](https://awesome-repositories.com/f/software-engineering-architecture/task-execution-engines/boot-time-task-execution.md) — Allows users to run custom scripts during startup to initialize background services or block the boot sequence. ([source](https://kernelsu.org/guide/module.html)) ### Web Development - [Root Capability Constraints](https://awesome-repositories.com/f/web-development/api-management-tools/api-development-management/api-infrastructure/api-capability-constraints/root-capability-constraints.md) — Limits specific Linux kernel capabilities for root-granted processes to prevent unauthorized actions even when running with superuser identity. ([source](https://kernelsu.org/guide/app-profile.html)) ### Development Tools & Productivity - [Kernel Feature Managers](https://awesome-repositories.com/f/development-tools-productivity/system-feature-managers/kernel-feature-managers.md) — Provides controls for specific kernel-level features to coordinate behavior and prevent conflicts between active modules. ([source](https://kernelsu.org/guide/module-config.html)) - [Shell Environment Configurations](https://awesome-repositories.com/f/development-tools-productivity/development-environment-management/environment-provisioning-configuration/developer-environment-tooling/shell-environment-configurations.md) — Supports loading user-defined configuration files during shell startup to apply custom environment variables for root sessions. ([source](https://kernelsu.org/guide/hidden-features.html)) - [Namespace Utility Backporters](https://awesome-repositories.com/f/development-tools-productivity/version-control-repository-tools/version-control-managers/git-utilities/commit-cherry-picking-tools/patch-backporting/namespace-utility-backporters.md) — Backports missing kernel filesystem functions to older environments to ensure full compatibility with module management and unmounting features. ([source](https://kernelsu.org/guide/how-to-integrate-for-non-gki.html)) ### Programming Languages & Runtimes - [Visibility Isolation Tools](https://awesome-repositories.com/f/programming-languages-runtimes/language-ecosystems-tooling/module-management/module-systems/visibility-isolation-tools.md) — Allows hiding system-level modifications from specific applications by unmounting kernel modules to ensure compatibility. ([source](https://kernelsu.org/guide/app-profile.html)) - [Module Deployment Hooks](https://awesome-repositories.com/f/programming-languages-runtimes/language-ecosystems-tooling/module-management/module-systems/module-deployment-hooks.md) — Allows overriding default installation and mounting logic for system modules by providing custom hooks. ([source](https://kernelsu.org/guide/metamodule.html)) - [Dynamic Module Metadata](https://awesome-repositories.com/f/programming-languages-runtimes/language-ecosystems-tooling/module-management/module-lifecycle-managers/dynamic-module-metadata.md) — Allows changing displayed module descriptions dynamically at runtime to reflect current status without requiring reinstallation. ([source](https://kernelsu.org/guide/module-config.html)) ### System Administration & Monitoring - [System Command Launchers](https://awesome-repositories.com/f/system-administration-monitoring/system-command-launchers.md) — Enables the execution of shell commands from web interfaces to modify system properties or retrieve configuration data. ([source](https://kernelsu.org/guide/module-webui.html)) ### User Interface & Experience - [Module Configuration Interfaces](https://awesome-repositories.com/f/user-interface-experience/graphical-user-interfaces/module-configuration-interfaces.md) — Renders interactive web-based user interfaces to allow users to configure or control module-specific settings. ([source](https://kernelsu.org/guide/module.html))