v0.7.0

• [Security] Fix a security issue similar to GHSA-pcx2-r23v-3j7c, please upgrade as soon as possible; credits to qwerty472123@github!
• [SU] App Profile now supports templates!
• [Module] Fixed the bug that the module directory may be accidentally umounted, causing the manager module directory to be empty.
• [SU] Fixed the issue where the allowlist may be messed up after an app is uninstalled.
• [Kernel] Add android14-5.15 and android14-6.1, supporting Pixel8 series.
• [SU] App Profile’s capability no longer requires CAP_DAC_READ_SEARCH and can run without any capability.
• [Kernel] Fixed the bootloop issues when working with Magisk.

v0.6.9

• [Kernel] Fixed security vulnerability.
• [Module] The GKI kernel supports automatic umount of modules to solve the problem of certain applications detecting module mount points.
• [Manager] Fixed the issue where the update log was too long causing the update dialog box to be abnormal.
• [Module] Adapt to the init process below Android 9.

v0.6.8

• [Module] Fixed an issue that caused all modules to disappear after the installation of some modules failed.
• [Manager] Fixed the problem of incorrect module file name when updating modules.
• [Manager] It is now possible to display the changelog before module updates.
• [Manager] The changelog can also be displayed when the manager is updated.
• [Kernel] Fixed the issue where applications granted su permissions would execute certain commands abnormally.
• [Kernel] Add some newly GKI kernel branches.

v0.6.7

• [Kernel]: Fix kernel version strings.
• [Kernel]: Fix build for 4.9 kernels.
• [Module]: Add post-mount stage for module and common scripts.
• [Module]: Fix module failed to install in some cases.
• [Manager]: Fix the bug that some modules cause the module list to be empty.

v0.6.6

Changelog:

1. [Manager] Lots of translation updates in many languages, thanks to all developers who contributed on Weblate.
2. [Manager] Fixed a bug where module list doesn't show in manager under some cases.
3. [Module] Boot scripts now support a new boot stage boot-completed, which will run after system finished booting, available for both common and module scripts.
4. [Kernel] Kernel tasks are now queued and run in a global single thread, to avoid timing issues causing su allowlist mixup.
5. [Module] Fixed a bug where flashing large modules could fail.
6. [Manager] Optimized log output when installing modules in manager, UI only shows concise logs while saving detailed logs to file.
7. [Module] Uninstalling modules is now delayed until next reboot, avoiding potential incomplete uninstall.
8. [Manager] Added loading spinner for module operations in manager.
9. [Module] Fixed a bug where common post-fs-data scripts don't run if no modules installed.
10. [Manager] Fixed some untcentered prompt texts in manager.
11. [SU] Fixed incorrect parameter parsing in su.
12. [Manager] Module install log now auto-scrolls to bottom in manager.
13. [Manager] Module install screen now automatically mutes system volume keys for module volume key selection.
14. [Manager] Refreshes module list after install to avoid user confusion.
15. [Kernel] Fixed keyring not installed correctly on 4.9 kernels causing modules not working.
16. [Module] SELinux context of module dirs are fixed automatically on boot, avoiding some boot failures.

v0.6.2

Changelog：
1.Translation updated, add Spanish.
2.Allow kernel to mount loop device, enhanced compatibility with modules.
3.App profile now supports setting sepolicy rules.
4.support the case that init_task.mnt_ns != zygote.mnt_ns, fix WSA profile saving.
5.Fixed the problem of repeated installation when pressing the return button when installing modules.
6.Other improvements and fixes.

v0.6.1

1.Support online updates for modules and manager.
2.Fix the potential issue of umount failing.
3.Harden the signature verification of the manager.

v0.6.0

Initial support for App Profile!

By setting appropriate UID, GID, groups, and capabilities (as well as the upcoming SELinux) for the apps that require root privileges, you can exercise more fine-grained control over these permissions. For instance, you can grant file manager-related permissions for read-write access and deny dangerous permissions like ptrace. You can also downgrade root privileges for apps like Ice Box to shell or system privileges. Open KernelSU's manager and begin setting up your App Profiles!

v0.5.7

1.Support for several languages.
2.Fixed a bug where the kernel umount may fail.
3.Fixed a bug where REPLACE in modules may not take effect.
4.Fixed a problem where x86_64 devices may not work.
5.Fixed some issues with module mounting.

v0.5.5

kernel: fix incorrect invalidate for manager in work profile