Kernel-basedAs the name suggests, KernelSU works under the Linux kernel giving it more control over userspace apps.
Customizable root privilegesKernelSU allows customization of su's uid, gid, groups, capabilities, and SELinux rules, locking up root privileges.