Merge branch 'tiann:main' into main

SECURITY.md

@@ -0,0 +1,7 @@
+# Reporting Security Issues
+
+The KernelSU team and community take security bugs in KernelSU seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
+
+To report a security issue, please use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/tiann/KernelSU/security/advisories/new) tab, or you can mailto [weishu](mailto:[email protected]) directly.
+
+The KernelSU team will send a response indicating the next steps in handling your report. After the initial reply to your report, the security team will keep you informed of the progress towards a fix and full announcement, and may ask for additional information or guidance.

kernel/selinux/rules.c

@@ -84,6 +84,8 @@ void apply_kernelsu_rules()
 	// our ksud triggered by init
 	ksu_allow(db, "init", "adb_data_file", "file", ALL);
 	ksu_allow(db, "init", KERNEL_SU_DOMAIN, ALL, ALL);
+	// we need to umount modules in zygote
+	ksu_allow(db, "zygote", "adb_data_file", "dir", "search");
 
 	// copied from Magisk rules
 	// suRights

website/docs/repos.json

@@ -488,5 +488,19 @@
         "kernel_name": "NovaCore_kernel",
         "kernel_link": "https://github.com/hc841/NovaCore_kernel",
         "devices": "Moto g9 play"
+    },
+    {
+        "maintainer": "zlm324",
+        "maintainer_link": "https://github.com/zlm324",
+        "kernel_name": "android_kernel_xiaomi_msm8998_ksu",
+        "kernel_link": "https://github.com/zlm324/android_kernel_xiaomi_msm8998_ksu",
+        "devices": "a lineage kernel forked from LineageOS official repository, version 4.4.302, added ksu."
+    },
+    {
+        "maintainer": "zlm324",
+        "maintainer_link": "https://github.com/zlm324",
+        "kernel_name": "android_kernel_xiaomi_msm8953_ksu",
+        "kernel_link": "https://github.com/zlm324/android_kernel_xiaomi_msm8953_ksu",
+        "devices": "Xiaomi 5X (tiffany)"
     }
-]
+]

website/docs/zh_CN/guide/difference-with-magisk.md

@@ -25,4 +25,4 @@
 4. BusyBox 的目录不同；KernelSU 内置的 BusyBox 在 `/data/adb/ksu/bin/busybox` 而 Magisk 在 `/data/adb/magisk/busybox`；**注意此为 KernelSU 内部行为，未来可能会更改！**
 5. KernelSU 不支持 `.replace` 文件；但 KernelSU 支持 `REPLACE` 和 `REMOVE` 变量。
 6. KernelSU 新增了一种脚本 `boot-completed.sh`，以便在 Android 系统启动后运行某些任务。
-7. KernelSU 新增了一种脚本 `post-moount.sh`，以便在 Overlayfs 挂载后运行某些任务。
+7. KernelSU 新增了一种脚本 `post-mount.sh`，以便在 Overlayfs 挂载后运行某些任务。