中文

x64 Device Compatibility

susfs4ksu-lkm

A loadable kernel module (LKM) port of SUSFS: run susfs without recompiling the kernel.

Loading

Pick the .ko that matches the device kernel, e.g. a 5.15 device uses susfs_guard_lkm-android13-5.15.ko.

KernelSU devices:

ksud insmod /data/adb/loader/susfs_guard_lkm.ko

Non-KernelSU devices: use the susfs_insmod loader shipped with the release:

susfs_insmod /data/adb/loader/susfs_guard_lkm.ko

Uninstall:

rmmod susfs_guard_lkm

Flashing as a KernelSU module

To skip picking the .ko by hand, each release also ships a packaged module susfs_guard_lkm-module-<tag>-arm64.zip: flash it in a KernelSU manager and reboot. The module picks the .ko for the device kernel (/proc/sys/kernel/osrelease), loads it with expose_proc=1, applies no susfs rules, and skips if susfs is already present. arm64 and KernelSU-compatible managers only. expose_proc=1 creates the /proc/susfs_* control nodes; sus rules are applied through them. To remove it: disable or remove the module in the KSU manager (takes effect after a reboot), or rmmod susfs_guard_lkm to unload it live.

Loading normally runs in the module's post-fs-data stage. To opt into loading from the earlier common post-fs-data.d stage, run as root:

touch /data/adb/modules/susfs_guard_lkm/early_load

Reboot to apply. Remove that file and reboot to return to normal loading; upgrades preserve it. Both stages use the same loader, skip an existing SUSFS interface, and respect safe mode and disabled/removed modules. Uninstall removes only this module's common dispatcher; it does not unload the running LKM.

Use early loading when SUSFS rules or original kstat snapshots must be configured before module post-fs-data scripts and mounts. It makes the interface available sooner, so those operations can run at the required boot stage. If the manager applies SUSFS settings before common scripts, an earlier loading stage is still required. The module only loads the LKM; the manager applies settings.

Interface docs

All /proc control nodes: see PROC_INTERFACES.en.md.

License

GPL-2.0, see LICENSE. Ported from: susfs4ksu (feature logic and hook points), SukiSU-Ultra (patch_memory / lsm_hook / symbol_resolver).

Disclaimer

For technical research and study only. Use at your own risk.