Comment 11 for bug 1790457

------- Comment From <email address hidden> 2018-09-10 07:03 EDT-------
> c18719638cc1 KVM: s390: generate facility mask from readable list
> d6450dc35e21 KVM: s390: Populate mask of non-hypervisor managed facility bits
> bb0258cde7a6 s390/facilities: add helper tool to generate facility lists
> 35b3fde6203b KVM: s390: wire up bpb feature
>
> I'm afraid we would take some time to backport all the requested fixes and their pre-reqs and get it right.

With the kernel version 4.4 this indeed takes some extra patches. In addition to
that we would need a matching qemu version as well which is probably overkill.

I have talked to Christian Borntr?ger about the KVM aspect and he would be fine
if we do not backport the KVM related patches. The end result is that the KVM
guests would use the expoline mitigation by default, even on machines with
the etoken facility. You can still use the spectre_v2=off kernel parameter to
disable expolines.

That reduces the list of git commits to only two:
aeaf7002a76c8da6 "s390: detect etoken facility"
5eda25b10297684c "s390/lib: use expoline for all bcr instructions"
plus the extra patch.