[SRU][N][RFC PATCH 1/1] UBUNTU: SAUCE: integrity: Load MokListRT certs into the machine keyring
Dean Marx
dean.marx at canonical.com
Fri Sep 25 19:04:47 UTC 2026
Restore get_handler_for_mok() as the default handler for MokListRT.
Fixes: 0ba9d5044222 ("UBUNTU: SAUCE: integrity: Load mokx certs from the EFI MOK config table")
BugLink: https://bugs.launchpad.net/bugs/2131181
Signed-off-by: Dean Marx <dean.marx at canonical.com>
---
security/integrity/platform_certs/load_uefi.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
index 667aa28d9125..ca5f9f084f84 100644
--- a/security/integrity/platform_certs/load_uefi.c
+++ b/security/integrity/platform_certs/load_uefi.c
@@ -120,7 +120,7 @@ static int __init load_moklist_certs(const bool load_db)
efi_char16_t *efivar_name = L"MokListRT";
const char *parse_mokvar_name = "UEFI:MokListRT (MOKvar table)";
const char *parse_efivar_name = "UEFI:MokListRT";
- efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_db;
+ efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_mok;
if (!load_db) {
mokvar_name = "MokListXRT";
--
2.53.0
More information about the kernel-team
mailing list