SUSFS for KernelSU installs the ksu_susfs and sus_su userspace tools used to configure root-hiding features provided by a compatible SUSFS-patched kernel.
Kernel-Aware Root Hiding
A configuration layer for KernelSU kernels that already contain the SUSFS implementation.
Kernel Interface
Communicates with SUSFS inside the kernel instead of attempting to add the kernel patch from userspace.
Userspace Helpers
Places ksu_susfs and sus_su under /data/adb/ksu and supplies boot scripts for persistent configuration.
Custom Rules
Provides configurable SUS paths, mounts, maps, open redirects, stat rules, and unmount behavior for advanced setups.
Essential Requirements
This package does not patch a stock kernel. The device must boot a custom KernelSU kernel whose source includes SUSFS, and the upstream module requires SUSFS 1.5.2 or later for the documented hiding behavior. Confirm both the kernel implementation and its SUSFS revision before installation.
The project documents optional interoperability with Shamiko 1.2.1 or later, HideMyApplist, and rooted ReVanced installations. These companion tools are not required by the module itself. For systemless hosts, upstream recommends a compatible bind-hosts implementation rather than assuming every hosts module will coexist with SUSFS mounts.
Configuration Scope
| Area | Purpose | Practical Note |
|---|---|---|
| Paths and mounts | Defines filesystem locations or mounts that SUSFS should handle. | Incorrect rules can hide required files from processes, so add entries selectively. |
| Maps and stat data | Controls supported kernel-side visibility and metadata behavior. | Available behavior depends on the exact SUSFS patch included by the kernel maintainer. |
| Kernel identity | Can spoof the kernel release and kernel build strings separately. | uname -r shows the release string; uname -v shows the build string. |
| Verified boot hash | Older revisions can read a supplied value from /data/adb/VerifiedBootHash/VerifiedBootHash.txt. | Upstream marks this method as deprecated for a future release and current CI builds. |
Installation and Operation
- Verify that the running kernel advertises the required SUSFS implementation and is paired with KernelSU.
- Install the release package through the root manager, reboot, and inspect the module status before adding custom rules.
- Use the bundled WebUI or documented configuration files to change one behavior at a time, then test the affected applications.
- Keep a known-working kernel and a recovery path available. Removing the userspace module cannot repair a kernel-side incompatibility.