I'm building dual boot systems, W7 and RHEL 6.7 with STIGs all around, which includes SEWLinux and a strong desire for privilege separation.

Windows protecting %SYSTEMROOT%\system32\config\*.evt? Check.

Linux protecting /var/log/audit? Check.

Windows respecting /var/log/audit on a file system that it thinks is unpartitioned space? Check.

Linux respecting /Cdrive/%SYSTEMROOT%/system32/config/*.evt? Uhhh......

Bear in mind that we do want to share files between O/Ss. If it HAS to be one-way (/dev/sda3 /Cdrive ro) I suppose we can, but that's suboptimal.

If you have set encryption on Win then I guess you will be safe with other OSes.

Well, if the data is truly sensitive, you've got a problem with the very idea of "dual booting." Windows needs to be running, serving-up the data from its (encrypted) partition, using its own software to do authorization, authentication, and file-sharing. BIOS facilities should be used to prevent any other OS from being booted on that box. Linux could then run, say, in a virtual machine hosted by Windows. Linux support for NTFS is quite basic, I suspect due to software patents.