fix(build 3.0.0): disable Realme UI bootloader fingerprint spoofing and enable Yuri Keybox support

- Remove the hard-coded RMX3661 (Realme 10 Pro) fingerprint override in the build scripts.
  The kernel will now use the actual device fingerprint on boot, resolving the Luna FRP “invalid/farm fingerprint” error.
- Devices can now pass Play Integrity/SafetyNet checks.
- Merge KernelSU-Next v1.0.9 updates to incorporate the latest root management patches.
- **Result:** Banking and Google apps pass integrity checks, and Realme 10 Pro & 9-series devices show clean integrity reports after update.

Author: frpunlocking-com

CHANGELOG.md

@@ -8,11 +8,11 @@ All notable changes to this project are documented in this file. Note: Pre-relea
 - Merged KernelSU‑Next v1.0.9 root‑management updates.
 
 ### Changed
-- Disabled Realme UI bootloader fingerprint spoofing; devices now report their true build fingerprint.  
+- Disabled Realme UI bootloader fingerprint spoofing; devices now report their true build fingerprint.
 - Now Yuri Keybox support for hardware‑backed Google Play Integrity (Strong) attestation.
 
 ### Fixed
-- Resolved Luna FRP “farm fingerprint” mismatch error.  
+- Resolved Luna FRP “farm fingerprint” mismatch error. 
 - Devices now pass SafetyNet/Play Integrity checks on Luigi & Oscar families.
 
 ## v2.0.0

KernelSU-Next

@@ -1 +1 @@
-Subproject commit 9d9f9ed5d5f3a66a2f44e24c926075554f9275ce
+Subproject commit 2241696498ce9dd742ce80b52c3ed6cca26e03ea

Makefile

@@ -1,8 +1,9 @@
 # SPDX-License-Identifier: GPL-2.0
 VERSION = 5
 PATCHLEVEL = 4
-SUBLEVEL = 254 #spoffing of Realme RMX3661, real is .292
-EXTRAVERSION = "qgki-gc916795b189b"
+SUBLEVEL = 292
+EXTRAVERSION = -gki
+NAME = Kleptomaniac Octopus
 
 # indicate that change "Kbuild: Support nested composite objects" is
 # present in the kernel so that out-of-tree modules can act upon it
@@ -343,9 +344,8 @@ else # !mixed-build
 include scripts/Kbuild.include
 
 # Read KERNELRELEASE from include/config/kernel.release (if it exists)
-
-KERNELRELEASE := 5.4.254-qgki-gc916795b189b
-KERNELVERSION := 5.4.254
+KERNELRELEASE = $(shell cat include/config/kernel.release 2> /dev/null)
+KERNELVERSION = $(VERSION)$(if $(PATCHLEVEL),.$(PATCHLEVEL)$(if $(SUBLEVEL),.$(SUBLEVEL)))$(EXTRAVERSION)
 export VERSION PATCHLEVEL SUBLEVEL KERNELRELEASE KERNELVERSION
 
 include scripts/subarch.include
@@ -1179,8 +1179,7 @@ export INSTALL_DTBS_PATH ?= $(INSTALL_PATH)/dtbs/$(KERNELRELEASE)
 
 MODLIB	= $(INSTALL_MOD_PATH)/lib/modules/$(KERNELRELEASE)
 export MODLIB
-INS_MOD := $(INSTALL_MOD_PATH)
-export INS_MOD
+
 #ifdef OPLUS_FEATURE_CHG_BASIC
 KBUILD_CFLAGS += -DOPLUS_FEATURE_CHG_BASIC
 #endif
@@ -1590,23 +1589,13 @@ _modinst_:
 	@sed 's:^:kernel/:' modules.builtin > $(MODLIB)/modules.builtin
 	@cp -f $(objtree)/modules.builtin.modinfo $(MODLIB)/
 	$(Q)$(MAKE) -f $(srctree)/scripts/Makefile.modinst
-# Ensure directories exist
-	@mkdir -p "$(INS_MOD)/../depmod_vendor_intermediates/lib/modules/0.0"
-	@mkdir -p "$(INS_MOD)/../depmod_vendor_ramdisk_intermediates/lib/modules/0.0"
-# Copy all files from versioned directory to /0.0/ (force overwrite)
-		@cp -a "$(INS_MOD)/lib/modules/$(KERNELRELEASE)/." "$(INS_MOD)/lib/modules/$(KERNELVERSION)/"
-# Copy ALL module metadata files (using find to handle spaces)
-	@find "$(INS_MOD)/lib/modules/$(KERNELRELEASE)/" -maxdepth 1 -type f -name 'modules.*' \
-		-exec cp -t "$(INS_MOD)/../depmod_vendor_intermediates/lib/modules/0.0/" {} +
-	@find "$(INS_MOD)/lib/modules/$(KERNELRELEASE)/" -maxdepth 1 -type f -name 'modules.*' \
-		-exec cp -t "$(INS_MOD)/../depmod_vendor_ramdisk_intermediates/lib/modules/0.0/" {} +
 
 # This depmod is only for convenience to give the initial
 # boot a modules.dep even before / is mounted read-write.  However the
 # boot script depmod is the master version.
 PHONY += _modinst_post
 _modinst_post: _modinst_
-	$(call cmd,depmod -b "$(INS_MOD)" -C /dev/null -e -F "$(INS_MOD)/lib/modules/$(KERNELRELEASE)/System.map" -E "$(INS_MOD)/lib/modules/$(KERNELRELEASE)/modules.order" "$(KERNELRELEASE)")
+	$(call cmd,depmod)
 
 ifeq ($(CONFIG_MODULE_SIG), y)
 PHONY += modules_sign

README.md

@@ -1,5 +1,22 @@
 # Realme 10 Pro LineageOS KSUN + SuSFS kernel with spoofing
 
+<<<<<<< HEAD
+- KSUN Nightly is root solution with hiding by SuSFS and spoofing as real device real device RMX3661 model with Realme UI 6.0 (Android 15) matching 1:1.
+- All features, except OverlaysFS Auto Kstat Support on SuSFS, proceed into an invisible root experience for all apps, including Revolut, bank, ChatGPT, goverment apps etc.
+- Custom-modified boot, dtbo, kernel images, and source code on every release.
+- Unmounting Pixelify files (use a LSPosed module for unlimited GPhotos backup).
+
+Device:
+
+- codename: luigi
+- IDs: 
+  - RMX3660,
+  - RMX3661,
+  - RMX3663.
+
+## Installation Steps
+
+=======
 - KSUN Nightly is root solution with hiding by SuSFS.
 - All features, except OverlaysFS Auto Kstat Support on SuSFS, proceed into an invisible root experience for all apps, including Revolut, bank, ChatGPT, goverment apps etc.
 - Custom-modified boot, dtbo, kernel images, and source code on every release.
@@ -43,21 +60,29 @@ On v3.x.x newest release based on KSUN v1.0.9 branch.
 
 ## Installation Steps
 
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 Tested with:
 
 - [lineage-22.2-20250614-nightly-luigi-signed.zip](https://mirrorbits.lineageos.org/full/luigi/20250614/lineage-22.2-20250614-nightly-luigi-signed.zip) 
 - [lineage-22.2-20250621-nightly-luigi-signed.zip](https://mirrorbits.lineageos.org/full/luigi/20250621/lineage-22.2-20250621-nightly-luigi-signed.zip)
 - [lineage-22.2-20250628-nightly-luigi-signed.zip](https://mirrorbits.lineageos.org/full/luigi/20250628/lineage-22.2-20250628-nightly-luigi-signed.zip)
 - [lineage-22.2-20250705-nightly-luigi-signed.zip](https://mirrorbits.lineageos.org/full/luigi/20250705/lineage-22.2-20250705-nightly-luigi-signed.zip)
 
+<<<<<<< HEAD
+If you don't have [LineageOS recovery](https://mirrorbits.lineageos.org/full/luigi/20250614/vendor_boot.img), flash it by:
+=======
 If you don't have [LineageOS recovery for luigi](https://mirrorbits.lineageos.org/full/luigi/20250705/vendor_boot.img) or [recovery for oscar](https://mirrorbits.lineageos.org/full/oscar/20250707/vendor_boot.img), flash it by:
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 
 ```
 fastboot flash vendor_boot vendor_boot.img
 
 fastboot reboot recovery
 ```
 
+<<<<<<< HEAD
+After flashing LineageOS and/or MindTheGApps, boot into LOS recovery fastboot (preffered) or factory fastboot and flash [latest boot and dtbo images](https://github.com/frpunlocking-com/android_kernel_realme_sm6375/releases) by:
+=======
 After flashing LineageOS and/or MindTheGApps, boot into LOS recovery (preffered) or fastboot and flash latest files attached at bottom of post. You have 3 methods to flash kernel by adb sideload of AnyKernel package or fastboot flash of boot images or flash on rooted Android by Kernel Flasher.
 
 1. Method by AnyKernel package is recommended from 2.0.0
@@ -74,6 +99,7 @@ adb sideload 3.0_oscar_AnyKernel3_LOS_22.2_Realme_9-Pro_9-5G_Q5.zip
 ```
 
 2. Alternative method by fastboot for your family:
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 
 ```
 fastboot flash boot_a boot.img
@@ -87,20 +113,36 @@ fastboot flash dtbo_b dtbo.img
 fastboot reboot
 ```
 
+<<<<<<< HEAD
+After device boots, install [Kernel SU Next Manager v1.0.8 (Latest Nightly)](https://nightly.link/KernelSU-Next/KernelSU-Next/workflows/build-manager-ci/next/Manager.zip).
+
+Confirmed safe for dirty flash on 2025‑06‑21 build, no data loss observed.
+
+Works seamlessly with MindTheGapps in [recovery](https://mirrorbits.lineageos.org/full/luigi/20250614/vendor_boot.img) (via Fastboot boot partition reflash).
+=======
 3. Alternative method by Kernel Flasher when you are rooted with AK3 Zip or partition images for your family.
 
 After the device boots, install Kernel SU Next Manager Nightly v1.0.9 (Latest). Confirmed safe for dirty flash from 2025‑06‑14 to 2025-06-28 builds on luigi, no data loss observed with dirty flash LineageOS from 14 to 05 (by adb sideload of zip).
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 
 ## Kernel Highlights
 
 - Built on Linux 5.4.292-qgki from LineageOS - includes upstream Android GKI compliance patches.
+<<<<<<< HEAD
+- KernelSU v12716 - latest version providing root access.
+=======
 - KernelSU 12797 v1.0.9 - latest version providing root access.
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 - SuSFS v1.5.5 - Android dynamic rootfs support.
 
 ## Enhancements & Fixes
 
 - Seamless GKI‑based kernel integration for the real Realme 10 Pro device built from scratch.
+<<<<<<< HEAD
+- No bootloops or data errors in testing on real device as of 2025‑06‑21.
+=======
 - No bootloops or data errors in testing on real device as of 2025‑07‑16.
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 - Spoofing RMX3661 factory Android 15 Realme UI 6.0 fingerprint.
 
 ## Known Issues
@@ -129,6 +171,32 @@ These kernel modifications are part of an academic project related to my master'
 - SuSFS, susfs4ksu, and Wild Kernels.
 - Big thanks to the Realme 10 Pro device maintainers and devs on LineageOS, testers, and the MindTheGapps maintainers and devs.
 
+<<<<<<< HEAD
+```
+
+#include <std_disclaimer.h>
+/*
+* Your warranty is... Still valid??
+*
+* I am not responsible if you brick your device,
+* dead SD card, installed viruses, burned battery
+* and thermonuclear war, or you getting fired
+* because the alarm app failed. Please do
+* some research if you have any concerns
+* about features included in this software
+* before flashing it! You are choosing to
+* make these strong modifications on your
+* device, and if you point the finger at me
+* for messing up your device,
+* I will laugh at you.
+* LICENSE.md
+* Our modifications are GPLv2 licensed.
+*/
+
+```
+
+# How do I submit patches to Android Common Kernels
+=======
 ## Warranty & Liability Disclaimer  
 
 I am not responsible if you brick your device, erase data, kill your SD card, install malware, burn the battery, trigger thermonuclear war, or get fired because an alarm app failed.  
@@ -140,6 +208,7 @@ For the full terms, see our **[Legal Notice](https://frpunlocking.com/legal)**.
 This software is distributed under the **GNU General Public License v2 (GPL-2.0)**, modifications licensed by [Pawel Potacki](potacki.com). See `LICENSE.md` for full terms.
 
 ## How do I submit patches to Android Common Kernels
+>>>>>>> 923a878e276e7c1375e66f2ab08bb96797ed6112
 
 1. BEST: Make all of your changes to upstream Linux. If appropriate, backport to the stable releases.
    These patches will be merged automatically in the corresponding common kernels. If the patch is already
@@ -150,7 +219,7 @@ This software is distributed under the **GNU General Public License v2 (GPL-2.0)
    coordinated with kernel-team@android.com. If you want to proceed, post a patch that conforms to the
    patch requirements below.
 
-## Common Kernel patch requirements
+# Common Kernel patch requirements
 
 - All patches must conform to the Linux kernel coding standards and pass `script/checkpatch.pl`
 - Patches shall not break gki_defconfig or allmodconfig builds for arm, arm64, x86, x86_64 architectures
@@ -163,7 +232,7 @@ This software is distributed under the **GNU General Public License v2 (GPL-2.0)
 
 Additional requirements are listed below based on patch type
 
-### Requirements for backports from mainline Linux: `UPSTREAM:`, `BACKPORT:`
+## Requirements for backports from mainline Linux: `UPSTREAM:`, `BACKPORT:`
 
 - If the patch is a cherry-pick from Linux mainline with no changes at all
     - tag the patch subject with `UPSTREAM:`.
@@ -210,7 +279,7 @@ instead of `UPSTREAM:`.
         Signed-off-by: Joe Smith <joe.smith@foo.org>
 ```
 
-### Requirements for other backports: `FROMGIT:`, `FROMLIST:`,
+## Requirements for other backports: `FROMGIT:`, `FROMLIST:`,
 
 - If the patch has been merged into an upstream maintainer tree, but has not yet
 been merged into Linux mainline
@@ -261,7 +330,7 @@ must be a stable maintainer branch (not rebased, so don't use `linux-next` for e
         Signed-off-by: Joe Smith <joe.smith@foo.org>
 ```
 
-### Requirements for Android-specific patches: `ANDROID:`
+## Requirements for Android-specific patches: `ANDROID:`
 
 - If the patch is fixing a bug to Android-specific code
     - tag the patch subject with `ANDROID:`
@@ -281,8 +350,8 @@ must be a stable maintainer branch (not rebased, so don't use `linux-next` for e
     - tag the patch subject with `ANDROID:`
     - add a `Bug:` tag with the Android bug (required for android-specific features)
 
-## Vibrator driver for HHG device
-### How to merge the driver into kernel source tree
+# Vibrator driver for HHG device
+## How to merge the driver into kernel source tree
 
  1. Copy \${this_project}/drivers/hid/hid-aksys.c into \${your_kernel_root}/drivers/hid/
 

arch/arm64/configs/gki_defconfig

@@ -624,3 +624,30 @@ CONFIG_NET_SCH_FQ_CODEL=y
 CONFIG_IP_NF_TARGET_TTL=y
 CONFIG_IP6_NF_TARGET_HL=y
 CONFIG_IP6_NF_MATCH_HL=y
+CONFIG_KSU=y
+CONFIG_KSU_KPROBES_HOOK=n
+CONFIG_KSU_SUSFS=y
+CONFIG_KSU_SUSFS_HAS_MAGIC_MOUNT=y
+CONFIG_KSU_SUSFS_SUS_PATH=y
+CONFIG_KSU_SUSFS_SUS_MOUNT=y
+CONFIG_KSU_SUSFS_AUTO_ADD_SUS_KSU_DEFAULT_MOUNT=y
+CONFIG_KSU_SUSFS_AUTO_ADD_SUS_BIND_MOUNT=y
+CONFIG_KSU_SUSFS_SUS_KSTAT=y
+CONFIG_KSU_SUSFS_SUS_OVERLAYFS=n
+CONFIG_KSU_SUSFS_TRY_UMOUNT=y
+CONFIG_KSU_SUSFS_AUTO_ADD_TRY_UMOUNT_FOR_BIND_MOUNT=y
+CONFIG_KSU_SUSFS_SPOOF_UNAME=y
+CONFIG_KSU_SUSFS_ENABLE_LOG=y
+CONFIG_KSU_SUSFS_HIDE_KSU_SUSFS_SYMBOLS=y
+CONFIG_KSU_SUSFS_SPOOF_CMDLINE_OR_BOOTCONFIG=y
+CONFIG_KSU_SUSFS_OPEN_REDIRECT=y
+CONFIG_KSU_SUSFS_SUS_SU=n
+CONFIG_TMPFS_XATTR=y
+CONFIG_TMPFS_POSIX_ACL=y
+CONFIG_TCP_CONG_ADVANCED=y
+CONFIG_TCP_CONG_BBR=y
+CONFIG_NET_SCH_FQ=y
+CONFIG_NET_SCH_FQ_CODEL=y
+CONFIG_IP_NF_TARGET_TTL=y
+CONFIG_IP6_NF_TARGET_HL=y
+CONFIG_IP6_NF_MATCH_HL=y

drivers/input/input.c.rej

@@ -0,0 +1,24 @@
+--- drivers/input/input.c
++++ drivers/input/input.c
+@@ -436,11 +436,21 @@ static void input_handle_event(struct input_dev *dev,
+  * to 'seed' initial state of a switch or initial position of absolute
+  * axis, etc.
+  */
++#ifdef CONFIG_KSU
++extern bool ksu_input_hook __read_mostly;
++extern int ksu_handle_input_handle_event(unsigned int *type, unsigned int *code, int *value);
++#endif
++
+ void input_event(struct input_dev *dev,
+ 		 unsigned int type, unsigned int code, int value)
+ {
+ 	unsigned long flags;
+ 
++#ifdef CONFIG_KSU
++	if (unlikely(ksu_input_hook))
++		ksu_handle_input_handle_event(&type, &code, &value);
++#endif
++
+ 	if (is_event_supported(type, dev->evbit, EV_MAX)) {
+ 
+ 		spin_lock_irqsave(&dev->event_lock, flags);

fs/Makefile

@@ -21,6 +21,8 @@ obj-$(CONFIG_KSU_SUSFS) += susfs.o
 
 obj-$(CONFIG_KSU_SUSFS) += susfs.o
 
+obj-$(CONFIG_KSU_SUSFS) += susfs.o
+
 ifeq ($(CONFIG_BLOCK),y)
 obj-y +=	buffer.o block_dev.o direct-io.o mpage.o
 else

fs/Makefile.orig

@@ -19,6 +19,8 @@ obj-y :=	open.o read_write.o file_table.o super.o \
 
 obj-$(CONFIG_KSU_SUSFS) += susfs.o
 
+obj-$(CONFIG_KSU_SUSFS) += susfs.o
+
 ifeq ($(CONFIG_BLOCK),y)
 obj-y +=	buffer.o block_dev.o direct-io.o mpage.o
 else

fs/proc/fd.c.rej

@@ -1,6 +1,16 @@
 --- fs/proc/fd.c
 +++ fs/proc/fd.c
-@@ -27,6 +30,9 @@ static int seq_show(struct seq_file *m, void *v)
+@@ -13,6 +13,9 @@
+ #include <linux/fs.h>
+ 
+ #include <linux/proc_fs.h>
++#ifdef CONFIG_KSU_SUSFS_SUS_MOUNT
++#include <linux/susfs_def.h>
++#endif
+ 
+ #include "../mount.h"
+ #include "internal.h"
+@@ -24,6 +27,9 @@ static int seq_show(struct seq_file *m, void *v)
  	int f_flags = 0, ret = -ENOENT;
  	struct file *file = NULL;
  	struct task_struct *task;
@@ -10,7 +20,7 @@
 
  	task = get_proc_task(m->private);
  	if (!task)
-@@ -57,10 +63,48 @@ static int seq_show(struct seq_file *m, void *v)
+@@ -54,10 +60,48 @@ static int seq_show(struct seq_file *m, void *v)
  	if (ret)
  		return ret;
 

fs/proc/task_mmu.c

@@ -20,6 +20,9 @@
 #include <linux/shmem_fs.h>
 #include <linux/uaccess.h>
 #include <linux/pkeys.h>
+#ifdef CONFIG_KSU_SUSFS_SUS_KSTAT
+#include <linux/susfs_def.h>
+#endif
 #include <linux/mm_inline.h>
 #include <linux/ctype.h>
 
@@ -376,6 +379,10 @@ static void show_vma_header_prefix_fake(struct seq_file *m,
 extern void susfs_sus_ino_for_show_map_vma(unsigned long ino, dev_t *out_dev, unsigned long *out_ino);
 #endif
 
+#ifdef CONFIG_KSU_SUSFS_SUS_KSTAT
+extern void susfs_sus_ino_for_show_map_vma(unsigned long ino, dev_t *out_dev, unsigned long *out_ino);
+#endif
+
 static void
 show_map_vma(struct seq_file *m, struct vm_area_struct *vma)
 {
@@ -391,6 +398,12 @@ show_map_vma(struct seq_file *m, struct vm_area_struct *vma)
 
 	if (file) {
 		struct inode *inode = file_inode(vma->vm_file);
+#ifdef CONFIG_KSU_SUSFS_SUS_KSTAT
+		if (unlikely(inode->i_state & INODE_STATE_SUS_KSTAT)) {
+			susfs_sus_ino_for_show_map_vma(inode->i_ino, &dev, &ino);
+			goto bypass_orig_flow;
+		}
+#endif
 #ifdef CONFIG_KSU_SUSFS_SUS_KSTAT
 		if (unlikely(inode->i_state & INODE_STATE_SUS_KSTAT)) {
 			susfs_sus_ino_for_show_map_vma(inode->i_ino, &dev, &ino);