docs: remove per-feature md files, restore table with descriptions and sources in index

README.md

@@ -34,18 +34,15 @@ By flashing this kernel, **YOU** are choosing to make these modifications. If so
 
 ## Features
 
-- [KernelSU](docs/kernelsu.md) / [KernelSU-Next](docs/kernelsu-next.md) / [ReSukiSU](docs/resukisu.md) - root implementations
-- [susfs4ksu](docs/susfs4ksu.md) - root hiding
-- [NoMount](docs/nomount.md) - mount metamodule
-- [Mountify](docs/mountify.md) - OverlayFS global mounts
-- [Baseband Guard](docs/bbg.md) - partition protection
-- [Networking](docs/networking.md) - WireGuard, BBR, IPSet, CIFS
-- [TMPFS](docs/tmpfs.md) - xattr / POSIX ACLs
-- [BPF](docs/bpf.md) - BTF / eBPF / FUSE-BPF
-- [Ptrace Leak Fix](docs/ptrace.md) - internal to root hiding
-- [Unicode Fix](docs/unicode.md) - internal to root hiding (experimental)
-- [Performance](docs/performance.md) - incl. [NTSync](docs/ntsync.md)
-- [DroidSpaces](docs/droidspaces.md) - container runtime
+- KernelSU / KernelSU-Next / ReSukiSU - root implementations
+- susfs4ksu - root hiding (incl. Ptrace Leak Fix, Unicode Fix)
+- NoMount / Mountify - mount metamodules
+- Baseband Guard - partition protection
+- Networking - WireGuard, BBR, IPSet, CIFS
+- TMPFS - xattr / POSIX ACLs
+- BPF - BTF / eBPF / FUSE-BPF
+- Performance - incl. NTSync
+- DroidSpaces - container runtime
 
 Full documentation: [docs/index.md](docs/index.md)
 

docs/ROOT_VARIANTS.md

@@ -1,77 +0,0 @@
-# Pinned GKI Root Variants
-
-`Build pinned root variants` is a manual, artifact-only workflow. It produces
-three separate source trees and never combines root implementations:
-
-| Variant | Source | Pinned commit |
-| --- | --- | --- |
-| KernelSU | `tiann/KernelSU` | `da9abf498a77d438989fea0f5f4e348b9a540c07` |
-| KernelSU Next | `KernelSU-Next/KernelSU-Next` `dev` | `234f6e040fcbca18b16d2398e1aa225712ec99ad` |
-| ReSukiSU | `ReSukiSU/ReSukiSU` | `3ef06b0fcb0960dc9563256fe26a58e892663387` |
-| NoMount | `maxsteeel/nomount` `dev` | `c52936b229c25a4b0e41b6627f7d3bc5eaaaf2b5` |
-
-The workflow resolves the selected target to its immutable SUSFS pin:
-
-| GKI target | SUSFS branch tip pinned for this workflow |
-| --- | --- |
-| android12-5.10 | `3c14ad549f826b1f53878ec8c12253efebeed75a` |
-| android13-5.10 | `f81aaf10e9560282052bb61dd931315c2ca3e617` |
-| android13-5.15 | `ccb1918684b27644d17a6c842f57b60ae5966025` |
-| android14-5.15 | `0463ac089308014e8c22cc6a4558e0d6d2a53e08` |
-| android14-6.1 | `e287d59066380bf6de4396532d4a42edf4408701` |
-| android15-6.6 | `be7b7ef49a1e1b189c3abf00eacaa7ebdb4168c1` |
-| android16-6.12 | `f37930f374ef88de990d6abea0c67d0ea28c1edc` |
-
-All pins were resolved on 2026-08-13 from the named upstream branches. A pin
-is re-verified after checkout; a mismatch, missing upstream `fs/nomount`
-integration, or existing root integration fails the build.
-
-The workflow snapshots ABI/KMI controls before root integration and verifies
-them immediately afterward. It then snapshots the approved, target-specific
-SUSFS and device-patch ABI updates before NoMount integration and requires
-NoMount to leave that baseline unchanged. The guard covers legacy ABI symbol
-lists and the Android 16 Bazel ABI/staging/symbol definitions. It does not
-remove protected exports, bypass ABI checks, build a bypass image, create
-releases, or claim device compatibility.
-
-## Build-verified only artifact metadata
-
-Successful builds upload a single `<target>-BuildInfo` artifact combining a
-human-readable summary table with an embedded machine-readable JSON block. The
-JSON `status` is **`Build-verified only`** only after the corresponding
-AnyKernel3 and NoMount metamodule artifacts are uploaded and their GitHub
-Actions API URLs and GitHub-issued `sha256` digests are recorded. Each record
-also includes the build method, root implementation/manager/version and commit,
-SUSFS and NoMount revisions, Android branch/KMI, kernel source commit, and
-provenance run URL.
-
-NoMount integration invokes the upstream `kernel/setup.sh` by its full immutable
-commit URL and passes that same SHA as the script argument. Each kernel artifact
-also receives a separately uploaded NoMount metamodule archive built from the
-same SHA; its artifact URL and SHA-256 digest are included in the metadata
-record. Kernel and metamodule revisions must match exactly.
-
-The metadata `catalog` object makes publication eligibility explicit:
-
-| Field | Required value |
-| --- | --- |
-| `availability` | `eligible-with-provenance-and-checksums` |
-| `device_compatibility` | `not-validated` |
-| `flashability` | `not-guaranteed` |
-| `boot` | `not-guaranteed` |
-
-This status means that CI completed the source build and artifact integrity
-metadata is available. It is not device validation and does not claim device
-compatibility, flashability, or a successful boot. A catalog or release
-publisher may expose a successful build artifact only with its provenance URL
-and both kernel and matching NoMount metamodule checksums. It must mark an
-unbuilt, failed, or metadata-incomplete entry unavailable and provide no
-download.
-
-This workflow remains artifact-only: it does not create releases or publish a
-catalog. Any separate publisher must enforce this metadata contract.
-
-Runs dispatched before this metadata contract was added cannot retroactively
-contain these metadata artifacts. Their artifact digests remain available from
-the GitHub Actions artifact API, but they must not be represented as complete
-metadata-contract records.

docs/bbg.md

@@ -1,19 +0,0 @@
-# Baseband Guard (BBG)
-
-Baseband Guard is a lightweight Linux Security Module (LSM) for the Android kernel, designed to block unauthorized writes to critical partitions and device nodes at the system level.
-
-## Source
-
-- **Source:** [vc-teahouse/Baseband-guard](https://github.com/vc-teahouse/Baseband-guard)
-
-## Purpose
-
-BBG protects critical baseband-related partitions and device nodes from unauthorized modifications. It operates at the kernel security module level, intercepting write operations to protected resources.
-
-## Build Integration
-
-When `use_bbg` is enabled in the build workflow, BBG is included in the kernel build. It is enabled by default.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/bpf.md

@@ -1,23 +0,0 @@
-# BTF / eBPF / FUSE-BPF
-
-This kernel includes support for BTF (BPF Type Format), eBPF (extended Berkeley Packet Filter), and FUSE-BPF.
-
-## BTF (`CONFIG_BTF`)
-
-BTF provides type information for BPF programs, enabling better introspection and debugging of BPF-based features. BTF is also used by various kernel tooling and debugging facilities.
-
-## eBPF (`CONFIG_BPF_EVENTS`)
-
-eBPF allows sandboxed programs to run in the kernel without changing kernel source code or loading modules. `CONFIG_BPF_EVENTS` enables BPF programs to attach to kernel events for tracing, monitoring, and other purposes.
-
-## FUSE-BPF (`CONFIG_FUSE_BPF`)
-
-FUSE-BPF enables BPF programs to interact with FUSE (Filesystem in Userspace) filesystems. This is useful for BPF-based debugging and tooling that involves FUSE-mounted filesystems.
-
-## Build Integration
-
-These options are enabled via kernel configuration and are included when the `use_bpf` feature flag is set in the build workflow.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/droidspaces.md

@@ -1,19 +0,0 @@
-# DroidSpaces-OSS
-
-DroidSpaces-OSS is a lightweight, LXC-inspired container runtime for Android and Linux, allowing full Linux distributions to run natively with zero performance penalty.
-
-## Source
-
-- **Source:** [ravindu644/Droidspaces-OSS](https://github.com/ravindu644/Droidspaces-OSS)
-
-## Purpose
-
-DroidSpaces provides container-like isolation for running Linux distributions on Android, using an LXC-inspired approach. It is designed to have minimal performance overhead.
-
-## Build Integration
-
-DroidSpaces-OSS patches are applied during the build workflow when `use_ds` is enabled. The source commit is resolved at the latest `main` branch tip at build time.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/index.md

@@ -4,45 +4,69 @@ Per-feature documentation for the GKI2 kernels built from this repository.
 
 ## Root Implementations
 
-- [KernelSU](kernelsu.md)
-- [KernelSU-Next](kernelsu-next.md)
-- [ReSukiSU](resukisu.md)
+| Root Flavor | Description | Source |
+|-------------|-------------|----------|
+| KernelSU | Root solution for GKI devices, original implementation by tiann, pinned to verified commit. SUSFS patches applied during build. | [tiann/KernelSU](https://github.com/tiann/KernelSU) |
+| KernelSU-Next | Root solution for GKI devices, original KernelSU-Next implementation, always at latest dev-tip. SUSFS-enabled builds sourced from pershoot fork. | [KernelSU-Next/KernelSU-Next](https://github.com/KernelSU-Next/KernelSU-Next) · [pershoot/KernelSU-Next](https://github.com/pershoot/KernelSU-Next) |
+| ReSukiSU | ReSukiSU root fork, pinned to verified commit. Own SUSFS pins per flavor. | [ReSukiSU/ReSukiSU](https://github.com/ReSukiSU/ReSukiSU) |
 
 ## Root Hiding
 
-- [susfs4ksu](susfs4ksu.md)
-- [Ptrace Leak Fix](ptrace.md)
-- [Unicode Fix](unicode.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| susfs4ksu | Root-hiding add-on for KernelSU using kernel patches and a userspace module. | [simonpunk/susfs4ksu](https://gitlab.com/simonpunk/susfs4ksu) |
+| Ptrace Leak Fix | Fixes ptrace info leak on kernels older than 5.16. Internal to root hiding. | [patch](https://github.com/WildKernels/kernel_patches/blob/main/gki_ptrace.patch) |
+| Unicode Fix | Prevents path traversal via non-printable Unicode (experimental). Internal to root hiding. | Internal to root hiding · [patch 6.1-](https://github.com/WildKernels/kernel_patches/blob/main/common/unicode_bypass_fix_6.1-.patch) · [patch 6.1+](https://github.com/WildKernels/kernel_patches/blob/main/common/unicode_bypass_fix_6.1+.patch) |
 
 ## Meta Module
 
-- [NoMount](nomount.md)
-- [Mountify](mountify.md)
+| Module | Description | Source |
+|--------|-------------|--------|
+| NoMount | Metamodule providing mount-related functionality alongside root implementations. | [maxsteeel/nomount](https://github.com/maxsteeel/nomount) |
+| Mountify | Globally mounted modules via OverlayFS. | [backslashxx/mountify](https://github.com/backslashxx/mountify) |
 
 ## Security
 
-- [Baseband Guard](bbg.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| Baseband Guard | Lightweight LSM blocking unauthorized writes to critical partitions and device nodes. | [vc-teahouse/Baseband-guard](https://github.com/vc-teahouse/Baseband-guard) |
 
 ## Networking
 
-- [Networking](networking.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| TCP Congestion Control | BBRv1, BBRv3, CUBIC, BIC, Westwood, HTCP | Upstream kernel |
+| WireGuard | Built-in VPN support | [wireguard/wireguard-linux-compat](https://git.zx2c4.com/wireguard-linux-compat/) |
+| IP Set / IPv6 NAT | Advanced firewall capabilities | Upstream kernel |
+| Conntrack / connmark | Connection marking for packet classification | Upstream kernel |
+| CIFS | SMB/CIFS network filesystem | Upstream kernel |
+| TTL Target | Network packet manipulation | Upstream kernel |
 
 ## Filesystem & Storage
 
-- [TMPFS](tmpfs.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| TMPFS Extended Attributes | Extended attributes on tmpfs | Upstream kernel |
+| TMPFS POSIX ACLs | POSIX ACL support on tmpfs | Upstream kernel |
 
 ## Debugging, Tracing & BPF
 
-- [BPF](bpf.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| BTF / eBPF / FUSE-BPF | BPF Type Format, extended BPF, FUSE-BPF interaction | Upstream kernel |
 
 ## Performance
 
-- [NTSync](ntsync.md)
-- [Performance Tuning](performance.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| NTSync | High-performance synchronization primitives compatible with Windows NT kernel API. | Internal |
+| Performance Tuning | Kernel configuration and tuning options | Upstream kernel |
 
 ## Container Runtime
 
-- [DroidSpaces-OSS](droidspaces.md)
+| Feature | Description | Source |
+|---------|-------------|--------|
+| DroidSpaces-OSS | LXC-inspired container runtime for Android/Linux | [ravindu644/Droidspaces-OSS](https://github.com/ravindu644/Droidspaces-OSS) |
 
 ---
 

docs/kernelsu-next.md

@@ -1,26 +0,0 @@
-# KernelSU-Next
-
-KernelSU-Next is a root solution for Android GKI devices that operates in kernel mode and grants root permission to userspace applications from kernel space.
-
-## Source
-
-- **Official:** [KernelSU-Next/KernelSU-Next](https://github.com/KernelSU-Next/KernelSU-Next) (`dev` branch)
-- **SUSFS-enabled fork:** [pershoot/KernelSU-Next](https://github.com/pershoot/KernelSU-Next) (`dev-susfs` branch, used when `use_susfs` is enabled)
-
-## How This Repo Uses It
-
-- Built when `root_flavor` is **`KernelSU-Next`** or **`All`**.
-- With SUSFS enabled, kernel sources come from the `pershoot/KernelSU-Next` fork.
-- Without SUSFS, kernel sources come from the official `KernelSU-Next/KernelSU-Next` `dev` branch.
-- Always resolves at latest dev-tip (not pinned).
-
-## Manager
-
-The KernelSU-Next manager APK is built from the official `KernelSU-Next/KernelSU-Next` repo and must match the kernel version (e.g., kernel version `30100` → manager version `30100`).
-
-## Related
-
-- [kernelsu.md](kernelsu.md) - KernelSU
-- [resukisu.md](resukisu.md) - ReSukiSU
-- [susfs4ksu.md](susfs4ksu.md) - root hiding add-on
-- [index.md](../index.md) - full feature index

docs/kernelsu.md

@@ -1,27 +0,0 @@
-# KernelSU
-
-KernelSU is a root solution for Android GKI devices that operates in kernel mode and grants root permission to userspace applications from kernel space. It is the original implementation by `tiann`.
-
-## Source
-
-- **Source:** [tiann/KernelSU](https://github.com/tiann/KernelSU) (`main` branch)
-- **Pinned commit:** `932014ab5b2c9b74a3d11e2ec4d17dd10fc9442e`
-
-Pinned in `main.yml` as `PIN_KERNELSU` and resolved via `pick` so builds are always verified against an exact commit.
-
-## How This Repo Uses It
-
-- Built when `root_flavor` is **`KernelSU`** or **`All`**.
-- SUSFS patches are applied during the build workflow (when `use_susfs` is enabled) rather than sourced from a SUSFS-enabled fork.
-- Resolved at the pinned commit in verified mode; at latest `main` tip in latest mode.
-
-## Manager
-
-The KernelSU manager APK is built from `tiann/KernelSU`. The manager version should match the kernel version (e.g., kernel version `30100` → manager version `30100`).
-
-## Related
-
-- [kernelsu-next.md](kernelsu-next.md) - KernelSU-Next
-- [resukisu.md](resukisu.md) - ReSukiSU
-- [susfs4ksu.md](susfs4ksu.md) - root hiding add-on
-- [index.md](../index.md) - full feature index

docs/mountify.md

@@ -1,25 +0,0 @@
-# Mountify
-
-Globally mounted modules via OverlayFS.
-
-## Source
-
-- **Upstream:** [backslashxx/mountify](https://github.com/backslashxx/mountify)
-
-## Description
-
-Mountify is a metamodule that globally mounts modules via OverlayFS. It acts as a KernelSU metamodule and also works on APatch and Magisk.
-
-- `CONFIG_OVERLAY_FS=y` is **required**
-- `CONFIG_TMPFS_XATTR=y` is **highly encouraged** (in the source / available in kernel config)
-
-It overlays `/mnt/vendor/fake_folder_name/system/bin` to `/system/bin` and other folders, mimicking an OEM mount.
-
-## Build Integration
-
-Mountify is documented as a meta module. Kernel config requirements are noted above - ensure `CONFIG_OVERLAY_FS=y` and `CONFIG_TMPFS_XATTR=y` are enabled in the kernel source.
-
-## Related
-
-- [nomount.md](nomount.md) - mount metamodule
-- [index.md](index.md) - full feature index

docs/networking.md

@@ -1,46 +0,0 @@
-# Networking Features
-
-This kernel includes a range of networking features and improvements, covering congestion control, VPN support, firewall capabilities, and traffic shaping.
-
-## Congestion Control
-
-| Algorithm | Description |
-|-----------|-------------|
-| **BBRv1** | Improved TCP congestion control. |
-| **BBRv3** | Improved TCP congestion control. Available for Android 12 (5.10) through Android 15 (6.6); Android 16 (6.12) support coming soon. |
-| **CUBIC** | Default TCP congestion control for many Linux systems. |
-| **BIC** | Binary Increase Congestion control. |
-| **Westwood** | TCP congestion control optimized for heterogeneous networks. |
-| **HTCP** | H-TCP congestion control. |
-
-## VPN Support
-
-- **WireGuard** - Built-in VPN support via the WireGuard kernel module.
-
-## Firewall & NAT
-
-- **IP Set** - Advanced firewall capabilities via ip_set.
-- **IPv6 NAT** - NAT support for IPv6.
-- **TTL Target** - Network packet manipulation via TTL targeting.
-
-## Traffic Shaping & Fair Queuing
-
-- **CAKE** - Common Applications Kept Enhanced; a full-featured queue discipline.
-- **fq** - Fair Queue packet scheduler.
-- **fq_codel** - Fair Queuing with Controlled Delay.
-
-## Connection Marking
-
-- **connmark** - Connection marking for packet classification.
-
-## Filesystem Support
-
-- **CIFS** - Network filesystem support for SMB/CIFS sharing.
-
-## Build Integration
-
-Most networking features are upstream kernel configurations enabled in the kernel config for each Android/kernel variant. BBRv3 backports are applied as patches for specific Android/kernel versions.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/nomount.md

@@ -1,26 +0,0 @@
-# NoMount
-
-NoMount is a metamodule for the Android kernel that provides mount-related functionality used alongside root implementations.
-
-This repository builds a flashable NoMount metamodule from the pinned NoMount source commit and uploads it as a separate artifact alongside the kernel build.
-
-## Source
-
-- **Repository:** [maxsteeel/nomount](https://github.com/maxsteeel/nomount)
-- **Branch:** `dev`
-
-## Build Integration
-
-NoMount is resolved either at a pinned verified commit (when `commit_mode=verified`) or at the latest `dev` branch tip (when `commit_mode=latest` or `update`).
-
-The build workflow:
-1. Clones the NoMount source at the resolved commit.
-2. Builds the metamodule archive from that commit.
-3. Uploads the metamodule as `NoMount-Metamodule`.
-
-The kernel and metamodule revisions must match exactly. The NoMount integration invokes the upstream `kernel/setup.sh` by its full immutable commit URL and passes that same SHA as the script argument.
-
-## Related
-
-- [kernelsu.md](kernelsu.md) - root implementation
-- [index.md](../index.md) - full feature index

docs/ntsync.md

@@ -1,22 +0,0 @@
-# NTSync
-
-High-performance synchronization primitives compatible with Windows NT kernel API. Internal to performance category.
-
-## Source
-
-- **Internal**
-
-## Purpose
-
-NTSync brings Windows-compatible synchronization primitives (such as those used by NT kernel objects) to the Android kernel, which can be useful for compatibility with software expecting Windows-style synchronization behavior.
-
-It is documented as internal to the performance category.
-
-## Build Integration
-
-NTSync is enabled via the `use_ntsync` feature flag in the build workflow. It is enabled by default.
-
-## Related
-
-- [performance.md](performance.md) - performance category
-- [index.md](index.md) - full feature index

docs/performance.md

@@ -1,19 +0,0 @@
-# Performance Tuning
-
-This kernel includes performance-related tuning and options, including NTSync.
-
-## Features
-
-| Feature | Description |
-|---------|-------------|
-| NTSync | High-performance synchronization primitives compatible with Windows NT kernel API. Internal to performance category. |
-| Performance Tuning | Kernel configuration and tuning options and optimizations aimed at improving system responsiveness and throughput. |
-
-## Build Integration
-
-Performance-related features are enabled via the `use_perf` feature flag in the build workflow. This flag is disabled by default. NTSync is controlled separately via `use_ntsync` (enabled by default) but documented under performance.
-
-## Related
-
-- [ntsync.md](ntsync.md) - NTSync details
-- [index.md](index.md) - full feature index

docs/ptrace.md

@@ -1,22 +0,0 @@
-# Ptrace Leak Fix
-
-Fixes ptrace info leak on kernels older than 5.16. Internal to root hiding.
-
-## Source
-
-- **Source:** [patch](https://github.com/WildKernels/kernel_patches/blob/main/gki_ptrace.patch) (`kernel_patches/gki_ptrace.patch`)
-
-## Purpose
-
-On kernels older than 5.16, a ptrace-related information leak may be present. This fix patches the kernel to close that leak, improving security for systems using ptrace.
-
-It is documented as internal to root hiding (SUSFS/KernelSU) - not a standalone top-level feature.
-
-## Build Integration
-
-The ptrace leak fix is applied as a patch during the build workflow when `use_ptrace` is enabled. It is enabled by default.
-
-## Related
-
-- [susfs4ksu.md](susfs4ksu.md) - root hiding
-- [index.md](index.md) - full feature index

docs/resukisu.md

@@ -1,27 +0,0 @@
-# ReSukiSU
-
-ReSukiSU is a root solution for Android GKI devices that operates in kernel mode and grants root permission to userspace applications from kernel space. It is a fork/variant of KernelSU maintained by the ReSukiSU project.
-
-## Source
-
-- **Source:** [ReSukiSU/ReSukiSU](https://github.com/ReSukiSU/ReSukiSU) (`main` branch)
-- **Pinned commit:** `03b60f260cce36f23efbd26c9c334edfdc9ce7eb`
-
-Pinned in `main.yml` as `PIN_RESUKISU` and resolved via `pick` so builds are always verified against an exact commit.
-
-## How This Repo Uses It
-
-- Built when `root_flavor` is **`ReSukiSU`** or **`All`**.
-- SUSFS patches are applied during the build workflow (when `use_susfs` is enabled), and ReSukiSU also has its own per-flavor SUSFS pins.
-- Resolved at the pinned commit in verified mode; at latest `main` tip in latest mode.
-
-## Manager
-
-The ReSukiSU manager APK is built from `ReSukiSU/ReSukiSU`. The manager version should match the kernel version (e.g., kernel version `30100` → manager version `30100`).
-
-## Related
-
-- [kernelsu.md](kernelsu.md) - KernelSU
-- [kernelsu-next.md](kernelsu-next.md) - KernelSU-Next
-- [susfs4ksu.md](susfs4ksu.md) - root hiding add-on
-- [index.md](../index.md) - full feature index

docs/susfs4ksu.md

@@ -1,35 +0,0 @@
-# susfs4ksu
-
-susfs4ksu is a KernelSU add-on that provides root-hiding mechanisms using kernel patches and a userspace module.
-
-## Source
-
-- **Source:** [simonpunk/susfs4ksu](https://gitlab.com/simonpunk/susfs4ksu)
-- **Module (userspace add-on):** [sidex15/susfs4ksu-module](https://github.com/sidex15/susfs4ksu-module)
-
-## Capabilities
-
-SUSFS provides multiple root-hiding and spoofing capabilities:
-
-| Capability | Description |
-|------------|-------------|
-| `SUS_PATH` | Hide suspicious paths from various system calls. Effective on zygote-spawned user app processes with `uid >= 10000`. |
-| `SUS_MOUNT` | Assign fake mount IDs to mounts and hide sus mounts from `/proc/self/[mounts|mountinfo|mountstat]` for non-su processes. |
-| `SUS_KSTAT` | Spoof kernel statistics for user-defined files/directories. Effective on zygote-spawned user app processes with `uid >= 10000`. |
-| `SPOOF_UNAME` | Spoof the string returned by the `uname` syscall to a user-defined string. Effective on all processes. |
-| `ENABLE_LOG` | Log SUSFS events to the kernel log. Disable to completely suppress SUSFS logging. |
-| `HIDE_KSU_SUSFS_SYMBOLS` | Automatically hide KSU and SUSFS symbols from `/proc/kallsyms`. Effective on all processes. |
-| `SPOOF_CMDLINE_OR_BOOTCONFIG` | Spoof `/proc/bootconfig` (GKI) or `/proc/cmdline` (non-GKI) output with a user-defined file. Effective on all processes. |
-| `OPEN_REDIRECT` | Redirect a target path to be opened with another user-defined path. Both paths must exist before they can be added. Requires SELinux permissions for both paths. Effective only on processes with a pre-defined UID scheme. |
-| `SUS_MAP` | Hide mmapped real files from `/proc/<pid>/[maps|smaps|smaps_rollup|map_files|mem|pagemap]`. No anonymous-memory support; does not hide inline/PLT hooks caused by the injected library itself. May not evade strong injection detection. Effective only on zygote-spawned unmounted user app processes with `uid >= 10000`. |
-| `AVC_SPOOF` | Spoof procfs AVC denial logs. Enabled at runtime via the sidex15 module - not a build-time Kconfig option. |
-
-## Build Integration
-
-In this repository, SUSFS kernel patches are applied per Android/kernel version variant. The pinned SUSFS commits per variant are defined in the build workflow (`.github/workflows/main.yml`).
-
-SUSFS is always built at the latest branch tip when the root flavor is KernelSU-Next; for KernelSU and ReSukiSU, it uses the audited pinned commits.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/tmpfs.md

@@ -1,19 +0,0 @@
-# TMPFS Features
-
-The kernel includes extended attributes (xattr) and POSIX ACL support for tmpfs.
-
-## TMPFS Extended Attributes (`TMPFS_XATTR`)
-
-Enables extended attributes on tmpfs filesystems. This is required for Mountify support and other features that depend on extended attributes on tmpfs.
-
-## TMPFS POSIX ACLs (`TMPFS_POSIX_ACL`)
-
-Enables POSIX Access Control Lists on tmpfs filesystems, allowing more fine-grained permission control on tmpfs-mounted files.
-
-## Build Integration
-
-Both features are enabled via kernel configuration options (`CONFIG_TMPFS_XATTR` and `CONFIG_TMPFS_POSIX_ACL`) and are included in the builds by default when the corresponding feature flags are set.
-
-## Related
-
-- [index.md](../index.md) - full feature index

docs/unicode.md

@@ -1,26 +0,0 @@
-# Unicode Fix
-
-Prevents path traversal via non-printable Unicode (experimental). Internal to root hiding.
-
-## Source
-
-- **Source:** Internal to root hiding - [patch 6.1-](https://github.com/WildKernels/kernel_patches/blob/main/common/unicode_bypass_fix_6.1-.patch) (`kernel_patches/common/unicode_bypass_fix_6.1-.patch`) · [patch 6.1+](https://github.com/WildKernels/kernel_patches/blob/main/common/unicode_bypass_fix_6.1+.patch) (`kernel_patches/common/unicode_bypass_fix_6.1+.patch`)
-
-## Purpose
-
-Certain path traversal attacks and detection-evasion techniques can use non-printable Unicode codepoints. The Unicode Fix patches the kernel to mitigate these vectors.
-
-It is documented as internal to root hiding (SUSFS/KernelSU) - not a standalone top-level feature.
-
-## Status
-
-**Experimental** - use at your own risk.
-
-## Build Integration
-
-The Unicode Fix is applied as a patch during the build workflow when `use_unicode` is enabled. It is enabled by default.
-
-## Related
-
-- [susfs4ksu.md](susfs4ksu.md) - root hiding
-- [index.md](index.md) - full feature index