From adcaaf9b93f9de14ba93bea54aecef103fe16b5f Mon Sep 17 00:00:00 2001
From: Michael Brown
Date: Wed, 14 Jan 2026 14:36:49 +0000
Subject: [build] Mark known reviewed files as permitted for UEFI Secure Boot

Some past security reviews carried out for UEFI Secure Boot signing
submissions have covered specific drivers or functional areas of iPXE.
Mark all of the files comprising these areas as permitted for UEFI
Secure Boot.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---
 src/interface/efi/efi_cacert.c  | 1 +
 src/interface/efi/efi_entropy.c | 1 +
 src/interface/efi/efi_fbcon.c   | 1 +
 src/interface/efi/efi_fdt.c     | 1 +
 src/interface/efi/efi_rng.c     | 1 +
 src/interface/efi/efi_usb.c     | 1 +
 src/interface/xen/xenbus.c      | 1 +
 src/interface/xen/xengrant.c    | 1 +
 src/interface/xen/xenstore.c    | 1 +
 9 files changed, 9 insertions(+)

(limited to 'src/interface')

diff --git a/src/interface/efi/efi_cacert.c b/src/interface/efi/efi_cacert.c
index 64bb0bae2..3e941ddc5 100644
--- a/src/interface/efi/efi_cacert.c
+++ b/src/interface/efi/efi_cacert.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *
diff --git a/src/interface/efi/efi_entropy.c b/src/interface/efi/efi_entropy.c
index cda1c3640..b6bd12ccc 100644
--- a/src/interface/efi/efi_entropy.c
+++ b/src/interface/efi/efi_entropy.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <errno.h>
 #include <ipxe/entropy.h>
diff --git a/src/interface/efi/efi_fbcon.c b/src/interface/efi/efi_fbcon.c
index 9c5d7063d..3896fd4d1 100644
--- a/src/interface/efi/efi_fbcon.c
+++ b/src/interface/efi/efi_fbcon.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /**
  * @file
diff --git a/src/interface/efi/efi_fdt.c b/src/interface/efi/efi_fdt.c
index 3c249693e..cd8580fcb 100644
--- a/src/interface/efi/efi_fdt.c
+++ b/src/interface/efi/efi_fdt.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <string.h>
 #include <byteswap.h>
diff --git a/src/interface/efi/efi_rng.c b/src/interface/efi/efi_rng.c
index 058f0ee7d..66b37fe89 100644
--- a/src/interface/efi/efi_rng.c
+++ b/src/interface/efi/efi_rng.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <errno.h>
 #include <ipxe/entropy.h>
diff --git a/src/interface/efi/efi_usb.c b/src/interface/efi/efi_usb.c
index b09272f58..a3b153c88 100644
--- a/src/interface/efi/efi_usb.c
+++ b/src/interface/efi/efi_usb.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdlib.h>
 #include <stdio.h>
diff --git a/src/interface/xen/xenbus.c b/src/interface/xen/xenbus.c
index 8b5ee0a0d..95bfdf7da 100644
--- a/src/interface/xen/xenbus.c
+++ b/src/interface/xen/xenbus.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdio.h>
 #include <string.h>
diff --git a/src/interface/xen/xengrant.c b/src/interface/xen/xengrant.c
index 269cd5836..b0a15010b 100644
--- a/src/interface/xen/xengrant.c
+++ b/src/interface/xen/xengrant.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <strings.h>
diff --git a/src/interface/xen/xenstore.c b/src/interface/xen/xenstore.c
index caeb4e934..a076cd046 100644
--- a/src/interface/xen/xenstore.c
+++ b/src/interface/xen/xenstore.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <stdarg.h>
-- 
cgit v1.2.3-55-g7522