Lines Matching full:uefi
17 * On T2 Macs reading the db and dbx efi variables to load UEFI Secure Boot
43 * Look to see if a UEFI variable called MokIgnoreDB exists and return true if
46 * This UEFI variable is set by the shim if a user tells the shim to not use
47 * the certs/hashes in the UEFI db variable for verification purposes. If it
99 * Load the certs contained in the UEFI MokListRT database into the
103 * that fails, this routine uses the MokListRT ordinary UEFI variable.
122 rc = parse_efi_signature_list("UEFI:MokListRT (MOKvar table)", in load_moklist_certs()
139 rc = parse_efi_signature_list("UEFI:MokListRT", in load_moklist_certs()
149 pr_info("Couldn't get UEFI MokListRT\n"); in load_moklist_certs()
154 * load_uefi_certs() - Load certs from UEFI sources
156 * Load the certs contained in the UEFI databases into the platform trusted
157 * keyring and the UEFI blacklisted X.509 cert SHA256 hashes into the blacklist
172 pr_err("Reading UEFI Secure Boot Certs is not supported on T2 Macs.\n"); in load_uefi_certs()
188 pr_err("MODSIGN: Couldn't get UEFI db list\n"); in load_uefi_certs()
190 rc = parse_efi_signature_list("UEFI:db", in load_uefi_certs()
204 pr_info("Couldn't get UEFI dbx list\n"); in load_uefi_certs()
206 rc = parse_efi_signature_list("UEFI:dbx", in load_uefi_certs()
225 rc = parse_efi_signature_list("UEFI:MokListXRT", in load_uefi_certs()