Device security across multiple operating system modalities, including: allocating, by a hypervisor, to a first virtual machine comprising a first operating system, based on the first modality, a first one or more access privileges to one or more resources; allocating, by the hypervisor, to a second virtual machine comprising a second operating system, based on the second modality, a second one or more access privileges to the one or more resources; and modifying, by the hypervisor, the second one or more access privileges in response to a change in an execution state of the first virtual machine.