NAME

dbxtool - mechanism to distribute and apply UEFI Secure Boot DBX updates

SYNOPSIS

dbxtool [--dbx=dbxfile | -d dbxfile ] [ --list | -l ] [ --verbose | -v ] [ --apply | -a ] [ updatedir | update0 [ ... updateN ]]

DESCRIPTION

dbxtool is a command line tool and oneshot systemd service for applying UEFI Secure Boot DBX updates.

OPTIONS

--dbx=dbxfile

Use a specified file for dbx rather than the system variable. This option only works with --list.

--list

List DBX entries in the system database, or in a copy of it or an update file.

--verbose

Show a bunch of verbose output about what dbxtool is doing.

--apply

Apply updates specified on the command line. Does not work with --dbx. This argument requires either an updatedir argument or one or more updateN arguments.

updatedir

Directory of dbx updates. Filenames must end in ".bin". This argument only works with --apply.

update0

An individual dbx update. This argument only works with --apply.

AUTHORS

Peter Jones