[coreboot-gerrit] Change in coreboot[master]: security/vboot: Add NVRAM counter for TPM 2.0

[Julius Werner (Code Review)]

Attention is currently required from: Miriam Polzer, Andrey Pronin, Yu-Ping Wu.
Julius Werner has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59097 )

Change subject: security/vboot: Add NVRAM counter for TPM 2.0
......................................................................

Patch Set 7: Code-Review+2

(1 comment)

File src/security/vboot/secdata_tpm.c:

https://review.coreboot.org/c/coreboot/+/59097/comment/df341179_a5b10e87 
PS3, Line 150: 	.TPMA_NV_NO_DA = 1,
> Ah, now I understand. […]

It's just a precaution, yeah, I don't think we really know of a concrete scenario this is supposed to prevent. But in my experience, once you get a TPM into DA defense mode it can be really annoying to get out (and break everything), so preventing it from happening in the first place is nice.