Version 1.4 of the Linux efitools package is now available and it supports reading and manipulating the UEFI signatures database.

From the EFI Tools package in the Linux user-space, it's now possible to read and manipulate the UEFI signatures database via the new efi-readvar and efi-updatevar commands. Aside from needing efitools 1.4, the EFIVARFS file-system is also needed, which was only introduced in the Linux 3.8 kernel.

More details on efitools 1.4 can be found in this blog post by James Bottomley.