This patch series extends the crypto adapter pass-through support to provide safeguards against inadvertent sharing of AP resources between guests and/or the host, and to implement more of the s390 AP architecture related to provisioning and dynamic configuration of AP resources. Change log v2->v3: ----------------- * Allow guest access to an AP queue only if the queue is bound to the vfio_ap device driver. * Removed the patch to test CRYCB masks before taking the vCPUs out of SIE. Now checking the shadow CRYCB in the vfio_ap driver. Change log v1->v2: ----------------- * Removed patches preventing root user from unbinding AP queues from the vfio_ap device driver * Introduced a shadow CRYCB in the vfio_ap driver to manage dynamic changes to the AP guest configuration due to root user interventions or hardware anomalies. Tony Krowiak (7): s390: vfio-ap: wait for queue empty on queue reset s390: vfio-ap: maintain a shadow of the guest's CRYCB s390: vfio-ap: sysfs interface to display guest CRYCB s390: vfio-ap: allow assignment of unavailable AP resources to mdev device s390: vfio-ap: allow hot plug/unplug of AP resources using mdev device s390: vfio-ap: handle bind and unbind of AP queue device s390: vfio-ap: update documentation Documentation/s390/vfio-ap.txt | 191 +++++++---- drivers/s390/crypto/vfio_ap_drv.c | 12 +- drivers/s390/crypto/vfio_ap_ops.c | 612 ++++++++++++++++++++++------------ drivers/s390/crypto/vfio_ap_private.h | 4 + 4 files changed, 536 insertions(+), 283 deletions(-) -- 2.7.4