nvpcr: define some reasonable priorities for the nvpcrs we already defined

diff --git a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
index acec95206f80727b6877fa40786edac47ac2800f..3f01ef34eb4d7650dd7b7c39f3251dfd96b541b7 100644 (file)
--- a/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/cryptsetup.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "cryptsetup",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 1}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 1}},
+    "priority" : 700
 }

diff --git a/src/tpm2-setup/nvpcr/hardware.nvpcr.in b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
index ddeb7f99e505fc1e9528ad10a7ad171cb56f9159..bb4a3afa6957a6c6a34822097b8c1733cd17e157 100644 (file)
--- a/src/tpm2-setup/nvpcr/hardware.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/hardware.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "hardware",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 0}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 0}},
+    "priority" : 500
 }

diff --git a/src/tpm2-setup/nvpcr/verity.nvpcr.in b/src/tpm2-setup/nvpcr/verity.nvpcr.in
index b4fb62bd762444b5a6e1b0c01fb3e95903ede071..7d1630d6cd15ce89fdd27ae29aadccdc9ba450f9 100644 (file)
--- a/src/tpm2-setup/nvpcr/verity.nvpcr.in
+++ b/src/tpm2-setup/nvpcr/verity.nvpcr.in
@@ -1,5 +1,6 @@
 {
     "name" : "verity",
     "algorithm" : "sha256",
-    "nvIndex" : {{TPM2_NVPCR_BASE + 2}}
+    "nvIndex" : {{TPM2_NVPCR_BASE + 2}},
+    "priority" : 300
 }