diff mbox series

[SRU,N,RFC,1/1] UBUNTU: SAUCE: integrity: Load MokListRT certs into the machine keyring

Message ID 20260925190447.356952-2-dean.marx@canonical.com
State New
Headers show
Series UBUNTU: SAUCE: Restore MokListRT machine-keyring handling | expand

Commit Message

Dean Marx Sept. 25, 2026, 7:04 p.m. UTC 
Restore get_handler_for_mok() as the default handler for MokListRT.

Fixes: 0ba9d5044222 ("UBUNTU: SAUCE: integrity: Load mokx certs from the EFI MOK config table")
BugLink: https://bugs.launchpad.net/bugs/2131181
Signed-off-by: Dean Marx <dean.marx@canonical.com>
---
 security/integrity/platform_certs/load_uefi.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
index 667aa28d9125..ca5f9f084f84 100644
--- a/security/integrity/platform_certs/load_uefi.c
+++ b/security/integrity/platform_certs/load_uefi.c
@@ -120,7 +120,7 @@  static int __init load_moklist_certs(const bool load_db)
 	efi_char16_t *efivar_name = L"MokListRT";
 	const char *parse_mokvar_name = "UEFI:MokListRT (MOKvar table)";
 	const char *parse_efivar_name = "UEFI:MokListRT";
-	efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_db;
+	efi_element_handler_t (*get_handler_for_guid)(const efi_guid_t *) = get_handler_for_mok;
 
 	if (!load_db) {
 		mokvar_name = "MokListXRT";