How can I compile my own kernel so that the only different between the newly compiled kernel and the one currently used in Fedora is the addition of SELinux support? Is compiling the kernel to get the standard Fedora template for Qubes documented? I imagine there are already some changes to the kernel used in the Fedora template, so if I get a vanilla kernel and compile it myself, it would miss those Qubes-specific changes?
I haven’t compiled kernels myself, but would like to try, so I’d appreciate any ideas on how to start.
Logging would be nice, but I how would you do it exactly? Something like this thread about a separate logging qube? Or will you log in the same qube?
The intruder after all will have SU root privileges by default
Because of passwordless sudo or because it’s generally easy to escalate to root, even if password protected?