[SRU][N][RFC PATCH 1/1] UBUNTU: SAUCE: integrity: Load MokListRT certs into the machine keyring

Dean Marx dean.marx at canonical.com
Fri Sep 25 19:04:47 UTC 2026


Restore get_handler_for_mok() as the default handler for MokListRT.

Fixes: 0ba9d5044222 ("UBUNTU: SAUCE: integrity: Load mokx certs from the EFI MOK config table")
BugLink: https://bugs.launchpad.net/bugs/2131181
Signed-off-by: Dean Marx <dean.marx at canonical.com>
---
 security/integrity/platform_certs/load_uefi.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
index 667aa28d9125..ca5f9f084f84 100644
--- a/security/integrity/platform_certs/load_uefi.c
+++ b/security/integrity/platform_certs/load_uefi.c
@@ -120,7 +120,7 @@ static int __init load_moklist_certs(const bool load_db)
 	efi_char16_t *efivar_name = L"MokListRT";
 	const char *parse_mokvar_name = "UEFI:MokListRT (MOKvar table)";
 	const char *parse_efivar_name = "UEFI:MokListRT";
-	efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_db;
+	efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_mok;
 
 	if (!load_db) {
 		mokvar_name = "MokListXRT";
-- 
2.53.0




More information about the kernel-team mailing list