seal-system: ACM module order matters.

Description

Discussed while reviewing: https://github.com/OpenXT/xenclient-oe/pull/1100

acmmatch will try to determine which ACM will be loaded on next reboot when forward sealing. Currently it assumes that only one ACM will match, which not guarantied.
Since only one event is emulated based on the ACM content currently, this is unlikely to fail forward-sealing, but this should still be fixed.

Validation Steps

  1. Find a machine that matches 2 ACMs (this can be tested using acmmatch and try to match all ACMs in /boot)

  2. Forward seal will likely fail if

    1. The machine matches more than one ACM,

    2. One ACM reports tcg_evlog_capability and not the other.

Assignee

Unassigned

Reporter

Eric Chanudet

Labels

None

QA Assignee

None

QA Image URL

None

Components

Fix versions

Priority

Critical
Configure