diff --git a/modules.d/98integrity/evm-enable.sh b/modules.d/98integrity/evm-enable.sh
index 4f73b885..39e13f04 100755
--- a/modules.d/98integrity/evm-enable.sh
+++ b/modules.d/98integrity/evm-enable.sh
@@ -76,8 +76,8 @@ load_evm_x509()
         return 1
     fi
 
-    local evm_pubid
-    local line=$(keyctl describe %keyring:.evm)
+    local evm_pubid line
+    line=$(keyctl describe %keyring:.evm)
     if [ $? -eq 0 ]; then
         # the kernel already setup a trusted .evm keyring so use that one
         evm_pubid=${line%%:*}