-
Notifications
You must be signed in to change notification settings - Fork 5.4k
features
TheWildJames edited this page Sep 2, 2026
·
1 revision
Per-feature documentation for the GKI2 kernels built from this repository.
Kernel-based su and root access management for Android.
| Root Flavor | Description | Source |
|---|---|---|
| KernelSU | Original implementation by tiann — the foundation from which all other variants are derived. | tiann/KernelSU |
| KernelSU-Next | Created by rifsxd. SUSFS-integrated builds sourced from pershoot. | KernelSU-Next/KernelSU-Next · pershoot/KernelSU-Next |
| ReSukiSU | Fork of SukiSU, also has its own SUSFS-integrated branch. | ReSukiSU/ReSukiSU |
| Feature | Description | Source |
|---|---|---|
| susfs4ksu | Root-hiding add-on for KernelSU using kernel patches and a userspace module. Recommended module: sidex15/susfs4ksu-module. | simonpunk/susfs4ksu |
| Ptrace Leak Fix | Fixes ptrace info leak on kernels older than 5.16. Internal to root hiding. | patch |
| Unicode Fix | Prevents path traversal via non-printable Unicode (experimental). Internal to root hiding. | patch 6.1- · patch 6.1+ |
| Module | Description | Source |
|---|---|---|
| NoMount | Metamodule providing mount-related functionality alongside root implementations. | maxsteeel/nomount |
| Mountify | Globally mounted modules via OverlayFS. | backslashxx/mountify |
Note
Only one is required if mounting modules.
Which one should I use?
-
NoMount — recommended, bundled as
nomount-metamodulein CI. - Mountify — alternative OverlayFS approach, not bundled — install latest compatible module manually.
| Feature | Description | Source |
|---|---|---|
| Baseband Guard | Lightweight LSM blocking unauthorized writes to critical partitions and device nodes. | vc-teahouse/Baseband-guard |
| Feature | Description | Source |
|---|---|---|
| TCP Congestion Control | BBRv1, BBRv3, CUBIC, BIC, Westwood, HTCP |
CONFIG_TCP_CONG_BBR / CONFIG_TCP_CONG_CUBIC etc |
| WireGuard | Built-in VPN support | CONFIG_WIREGUARD |
| IP Set / IPv6 NAT | Advanced firewall capabilities |
CONFIG_IP_SET / CONFIG_IP6_NF_NAT
|
| Conntrack / connmark | Connection marking for packet classification |
CONFIG_NF_CONNTRACK / CONFIG_NET_ACT_CONNMARK
|
| CIFS | SMB/CIFS network filesystem | CONFIG_CIFS |
| TTL Target | Network packet manipulation |
CONFIG_IP_NF_TARGET_TTL / CONFIG_IP6_NF_TARGET_HL
|
| Feature | Description | Source |
|---|---|---|
| BTF / eBPF / FUSE-BPF | BPF Type Format, extended BPF, FUSE-BPF interaction |
CONFIG_DEBUG_INFO_BTF / CONFIG_BPF_SYSCALL / CONFIG_FUSE_BPF
|
| Feature | Description | Source |
|---|---|---|
| NTSync | High-performance synchronization primitives compatible with Windows NT kernel API. | WildKernels/kernel_patches |
| Performance Tuning | Kernel configuration and tuning options | WildKernels/kernel_patches |
| Feature | Description | Source |
|---|---|---|
| DroidSpaces-OSS | LXC-inspired container runtime for Android/Linux | ravindu644/Droidspaces-OSS |
Tip
Installation — see Installation Guide.