Access to /sys/kernel/security/ is only effective for the current session

Hello,

[CC: @ibmcb]

I see there's:
https://github.com/keylime/keylime-deb/blob/219cad99509c0c2c9dabae61cbfd2e64b34754da/postinst#L33-L35

But this is only in effect for the current session. As soon as there's a reboot, these changes are essentially lost. So I believe it'd be a good idea to set this via the systemd services as well?

Something along the lines of:
`ExecStartPre=-/bin/chown -R tss:tss /sys/kernel/security/tpm0 `

What do you think?

Start by reading the permission commands in the linked postinst lines and locating the systemd service definitions in this Debian packaging repository. Check how service startup can reapply access to /sys/kernel/security/tpm0 after reboot, then verify that the permission remains effective across a restart.

Written by the indexing model from the issue text.