17  * On T2 Macs reading the db and dbx efi variables to load UEFI Secure Boot
47  * the certs/hashes in the UEFI db variable for verification purposes.  If it
48  * is set, we should ignore the db variable also and the true return indicates
54 	unsigned int db = 0;  in uefi_check_ignore_db()  local
55 	unsigned long size = sizeof(db);  in uefi_check_ignore_db()
58 	status = efi.get_variable(L"MokIgnoreDB", &guid, NULL, &size, &db);  in uefi_check_ignore_db()
70 	void *db;  in get_cert_list()  local
81 	db = kmalloc(lsize, GFP_KERNEL);  in get_cert_list()
82 	if (!db)  in get_cert_list()
85 	*status = efi.get_variable(name, guid, NULL, &lsize, db);  in get_cert_list()
87 		kfree(db);  in get_cert_list()
88 		pr_err("Error reading db var: 0x%lx\n", *status);  in get_cert_list()
93 	return db;  in get_cert_list()
164 	void *db = NULL, *dbx = NULL, *mokx = NULL;  in load_uefi_certs()  local
179 	/* Get db and dbx.  They might not exist, so it isn't an error  in load_uefi_certs()
183 		db = get_cert_list(L"db", &secure_var, &dbsize, &status);  in load_uefi_certs()
184 		if (!db) {  in load_uefi_certs()
186 				pr_debug("MODSIGN: db variable wasn't found\n");  in load_uefi_certs()
188 				pr_err("MODSIGN: Couldn't get UEFI db list\n");  in load_uefi_certs()
190 			rc = parse_efi_signature_list("UEFI:db",  in load_uefi_certs()
191 					db, dbsize, get_handler_for_db);  in load_uefi_certs()
193 				pr_err("Couldn't parse db signatures: %d\n",  in load_uefi_certs()
195 			kfree(db);  in load_uefi_certs()