Security implications using native kernels

[enmus]

Ok, we can use pvgrub2-pvh in order to be able to use PVH virt_mod. But are there any other security implications on using native kernel in PVH mode against using kernel packaged and provided by Qubes devs in PVH mode too?

[xn0px90]

SSBnb3QgeW91IQ==

[enmus]

@xn0px90

there may be some security implications to consider when using a native kernel in PVH mode

Which ones?

@xn0px90

One potential issue is that a native kernel may not have the same level of security hardening as a kernel provided by the Qubes developers

How would I know?

@xn0px90

the Qubes developers may have implemented additional security measures in their kernel that are not present in a native kernel,

Which, if?

@xn0px90

It is important to carefully evaluate the security implications of using a native kernel in PVH mode

How?

Thanks!

[xn0px90]

SSBnb3QgeW91IQ==