Initial support for App Profile!
By setting appropriate UID, GID, groups, and capabilities (as well as the upcoming SELinux) for the apps that require root privileges, you can exercise more fine-grained control over these permissions. For instance, you can grant file manager-related permissions for read-write access and deny dangerous permissions like ptrace. You can also downgrade root privileges for apps like Ice Box to shell or system privileges. Open KernelSU's manager and begin setting up your App Profiles!