diff --git a/src/Makefile b/src/Makefile
index 22f413d25..f9d782f97 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -107,16 +107,12 @@ SRCDIRS		+= hci/mucurses hci/mucurses/widgets
 SRCDIRS		+= hci/keymap
 SRCDIRS		+= usr
 SRCDIRS		+= config
-
-# These directories contain code that is not eligible for UEFI Secure
-# Boot signing.
-#
-SRCDIRS_INSEC	+= net/oncrpc
-SRCDIRS_INSEC	+= net/80211
-SRCDIRS_INSEC	+= drivers/net/rtl818x
-SRCDIRS_INSEC	+= drivers/net/ath
-SRCDIRS_INSEC	+= drivers/net/ath/ath5k
-SRCDIRS_INSEC	+= drivers/net/ath/ath9k
+SRCDIRS		+= net/oncrpc
+SRCDIRS		+= net/80211
+SRCDIRS		+= drivers/net/rtl818x
+SRCDIRS		+= drivers/net/ath
+SRCDIRS		+= drivers/net/ath/ath5k
+SRCDIRS		+= drivers/net/ath/ath9k
 
 # NON_AUTO_SRCS lists files that are excluded from the normal
 # automatic build system.
diff --git a/src/Makefile.housekeeping b/src/Makefile.housekeeping
index f56766cd6..d2a23c48a 100644
--- a/src/Makefile.housekeeping
+++ b/src/Makefile.housekeeping
@@ -436,11 +436,6 @@ endif
 #
 # Source file handling
 
-# Exclude known-insecure files from Secure Boot builds
-ifeq ($(SECUREBOOT),0)
-SRCDIRS		+= $(SRCDIRS_INSEC)
-endif
-
 # SRCDIRS lists all directories containing source files.
 srcdirs :
 	@$(ECHO) $(SRCDIRS)
diff --git a/src/drivers/net/ath/ath.h b/src/drivers/net/ath/ath.h
index 21f795b70..60d2ee021 100644
--- a/src/drivers/net/ath/ath.h
+++ b/src/drivers/net/ath/ath.h
@@ -21,6 +21,7 @@
 #define ATH_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <unistd.h>
 #include <string.h>
diff --git a/src/drivers/net/ath/ath5k/ath5k.c b/src/drivers/net/ath/ath5k/ath5k.c
index 643884d46..09510d3d2 100644
--- a/src/drivers/net/ath/ath5k/ath5k.c
+++ b/src/drivers/net/ath/ath5k/ath5k.c
@@ -44,6 +44,7 @@
  */
 
 FILE_LICENCE ( BSD3 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <stdlib.h>
 #include <ipxe/malloc.h>
diff --git a/src/drivers/net/ath/ath5k/ath5k.h b/src/drivers/net/ath/ath5k/ath5k.h
index 727d41279..612926f17 100644
--- a/src/drivers/net/ath/ath5k/ath5k.h
+++ b/src/drivers/net/ath/ath5k/ath5k.h
@@ -22,6 +22,7 @@
 #define _ATH5K_H
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <stddef.h>
 #include <string.h>
diff --git a/src/drivers/net/ath/ath5k/ath5k_attach.c b/src/drivers/net/ath/ath5k/ath5k_attach.c
index 302536dbd..fb3382943 100644
--- a/src/drivers/net/ath/ath5k/ath5k_attach.c
+++ b/src/drivers/net/ath/ath5k/ath5k_attach.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /*************************************\
 * Attach/Detach Functions and helpers *
diff --git a/src/drivers/net/ath/ath5k/ath5k_caps.c b/src/drivers/net/ath/ath5k/ath5k_caps.c
index 9c00d15d7..bc5abc58c 100644
--- a/src/drivers/net/ath/ath5k/ath5k_caps.c
+++ b/src/drivers/net/ath/ath5k/ath5k_caps.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /**************\
 * Capabilities *
diff --git a/src/drivers/net/ath/ath5k/ath5k_desc.c b/src/drivers/net/ath/ath5k/ath5k_desc.c
index 816d26ede..a3ac340df 100644
--- a/src/drivers/net/ath/ath5k/ath5k_desc.c
+++ b/src/drivers/net/ath/ath5k/ath5k_desc.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /******************************\
  Hardware Descriptor Functions
diff --git a/src/drivers/net/ath/ath5k/ath5k_dma.c b/src/drivers/net/ath/ath5k/ath5k_dma.c
index fa1e0d013..f27ea8fd2 100644
--- a/src/drivers/net/ath/ath5k/ath5k_dma.c
+++ b/src/drivers/net/ath/ath5k/ath5k_dma.c
@@ -19,6 +19,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /*************************************\
 * DMA and interrupt masking functions *
diff --git a/src/drivers/net/ath/ath5k/ath5k_eeprom.c b/src/drivers/net/ath/ath5k/ath5k_eeprom.c
index 46f33d1e8..5219ef148 100644
--- a/src/drivers/net/ath/ath5k/ath5k_eeprom.c
+++ b/src/drivers/net/ath/ath5k/ath5k_eeprom.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /*************************************\
 * EEPROM access functions and helpers *
diff --git a/src/drivers/net/ath/ath5k/ath5k_gpio.c b/src/drivers/net/ath/ath5k/ath5k_gpio.c
index 2301ec70b..7f9652b1e 100644
--- a/src/drivers/net/ath/ath5k/ath5k_gpio.c
+++ b/src/drivers/net/ath/ath5k/ath5k_gpio.c
@@ -19,6 +19,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /****************\
   GPIO Functions
diff --git a/src/drivers/net/ath/ath5k/ath5k_initvals.c b/src/drivers/net/ath/ath5k/ath5k_initvals.c
index 8f3bd2034..f2fd23bb4 100644
--- a/src/drivers/net/ath/ath5k/ath5k_initvals.c
+++ b/src/drivers/net/ath/ath5k/ath5k_initvals.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <unistd.h>
 
diff --git a/src/drivers/net/ath/ath5k/ath5k_pcu.c b/src/drivers/net/ath/ath5k/ath5k_pcu.c
index c8165da79..6821a01d5 100644
--- a/src/drivers/net/ath/ath5k/ath5k_pcu.c
+++ b/src/drivers/net/ath/ath5k/ath5k_pcu.c
@@ -23,6 +23,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /*********************************\
 * Protocol Control Unit Functions *
diff --git a/src/drivers/net/ath/ath5k/ath5k_phy.c b/src/drivers/net/ath/ath5k/ath5k_phy.c
index c2a66a4d3..d220b255b 100644
--- a/src/drivers/net/ath/ath5k/ath5k_phy.c
+++ b/src/drivers/net/ath/ath5k/ath5k_phy.c
@@ -23,6 +23,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define _ATH5K_PHY
 
diff --git a/src/drivers/net/ath/ath5k/ath5k_qcu.c b/src/drivers/net/ath/ath5k/ath5k_qcu.c
index e38dba9e2..ff4b9e5e3 100644
--- a/src/drivers/net/ath/ath5k/ath5k_qcu.c
+++ b/src/drivers/net/ath/ath5k/ath5k_qcu.c
@@ -19,6 +19,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 /********************************************\
 Queue Control Unit, DFS Control Unit Functions
diff --git a/src/drivers/net/ath/ath5k/ath5k_reset.c b/src/drivers/net/ath/ath5k/ath5k_reset.c
index 73765a7b0..98c729cf0 100644
--- a/src/drivers/net/ath/ath5k/ath5k_reset.c
+++ b/src/drivers/net/ath/ath5k/ath5k_reset.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define _ATH5K_RESET
 
diff --git a/src/drivers/net/ath/ath5k/ath5k_rfkill.c b/src/drivers/net/ath/ath5k/ath5k_rfkill.c
index 752ef70b9..74708af9e 100644
--- a/src/drivers/net/ath/ath5k/ath5k_rfkill.c
+++ b/src/drivers/net/ath/ath5k/ath5k_rfkill.c
@@ -35,6 +35,7 @@
  */
 
 FILE_LICENCE ( MIT );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "base.h"
 
diff --git a/src/drivers/net/ath/ath5k/base.h b/src/drivers/net/ath/ath5k/base.h
index 976a3f306..1155da68e 100644
--- a/src/drivers/net/ath/ath5k/base.h
+++ b/src/drivers/net/ath/ath5k/base.h
@@ -45,6 +45,7 @@
 #define _DEV_ATH_ATHVAR_H
 
 FILE_LICENCE ( BSD3 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "ath5k.h"
 #include <ipxe/iobuf.h>
diff --git a/src/drivers/net/ath/ath5k/desc.h b/src/drivers/net/ath/ath5k/desc.h
index 6e11b0d43..bcbd291f4 100644
--- a/src/drivers/net/ath/ath5k/desc.h
+++ b/src/drivers/net/ath/ath5k/desc.h
@@ -16,6 +16,8 @@
  *
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Internal RX/TX descriptor structures
  * (rX: reserved fields possibily used by future versions of the ar5k chipset)
diff --git a/src/drivers/net/ath/ath5k/eeprom.h b/src/drivers/net/ath/ath5k/eeprom.h
index da4543393..e7b25b09f 100644
--- a/src/drivers/net/ath/ath5k/eeprom.h
+++ b/src/drivers/net/ath/ath5k/eeprom.h
@@ -16,6 +16,8 @@
  *
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Common ar5xxx EEPROM data offsets (set these on AR5K_EEPROM_BASE)
  */
diff --git a/src/drivers/net/ath/ath5k/reg.h b/src/drivers/net/ath/ath5k/reg.h
index 7070d1543..fd9aa7c8e 100644
--- a/src/drivers/net/ath/ath5k/reg.h
+++ b/src/drivers/net/ath/ath5k/reg.h
@@ -17,6 +17,8 @@
  *
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Register values for Atheros 5210/5211/5212 cards from OpenBSD's ar5k
  * maintained by Reyk Floeter
diff --git a/src/drivers/net/ath/ath5k/rfbuffer.h b/src/drivers/net/ath/ath5k/rfbuffer.h
index e50baff66..bcbaf1db9 100644
--- a/src/drivers/net/ath/ath5k/rfbuffer.h
+++ b/src/drivers/net/ath/ath5k/rfbuffer.h
@@ -17,6 +17,7 @@
  *
  */
 
+FILE_SECBOOT ( FORBIDDEN );
 
 /*
  * There are some special registers on the RF chip
diff --git a/src/drivers/net/ath/ath5k/rfgain.h b/src/drivers/net/ath/ath5k/rfgain.h
index 1354d8c39..a220d8661 100644
--- a/src/drivers/net/ath/ath5k/rfgain.h
+++ b/src/drivers/net/ath/ath5k/rfgain.h
@@ -18,6 +18,8 @@
  *
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Mode-specific RF Gain table (64bytes) for RF5111/5112
  * (RF5110 only comes with AR5210 and only supports a/turbo a mode so initial
diff --git a/src/drivers/net/ath/ath9k/ani.h b/src/drivers/net/ath/ath9k/ani.h
index ba87ba0fd..2aeb5654d 100644
--- a/src/drivers/net/ath/ath9k/ani.h
+++ b/src/drivers/net/ath/ath9k/ani.h
@@ -21,6 +21,7 @@
 #define ANI_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define HAL_PROCESS_ANI           0x00000001
 
diff --git a/src/drivers/net/ath/ath9k/ar5008_initvals.h b/src/drivers/net/ath/ath9k/ar5008_initvals.h
index fcc155654..a4466b286 100644
--- a/src/drivers/net/ath/ath9k/ar5008_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar5008_initvals.h
@@ -15,6 +15,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 static const u32 ar5416Modes[][6] = {
 	{0x00001030, 0x00000230, 0x00000460, 0x000002c0, 0x00000160, 0x000001e0},
diff --git a/src/drivers/net/ath/ath9k/ar9001_initvals.h b/src/drivers/net/ath/ath9k/ar9001_initvals.h
index 6c1ccd50e..5bf2d5dd4 100644
--- a/src/drivers/net/ath/ath9k/ar9001_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar9001_initvals.h
@@ -15,6 +15,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 static const u32 ar5416Modes_9100[][6] = {
 	{0x00001030, 0x00000230, 0x00000460, 0x000002c0, 0x00000160, 0x000001e0},
diff --git a/src/drivers/net/ath/ath9k/ar9002_initvals.h b/src/drivers/net/ath/ath9k/ar9002_initvals.h
index f9a92c9b7..82bd94a5e 100644
--- a/src/drivers/net/ath/ath9k/ar9002_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar9002_initvals.h
@@ -15,6 +15,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 static __unused const u32 ar9280Modes_9280_2[][6] = {
 	{0x00001030, 0x00000230, 0x00000460, 0x000002c0, 0x00000160, 0x000001e0},
diff --git a/src/drivers/net/ath/ath9k/ar9002_phy.h b/src/drivers/net/ath/ath9k/ar9002_phy.h
index 71d9162c9..a6f5db97a 100644
--- a/src/drivers/net/ath/ath9k/ar9002_phy.h
+++ b/src/drivers/net/ath/ath9k/ar9002_phy.h
@@ -17,6 +17,7 @@
 #define AR9002_PHY_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define AR_PHY_TEST             0x9800
 #define PHY_AGC_CLR             0x10000000
diff --git a/src/drivers/net/ath/ath9k/ar9003_2p2_initvals.h b/src/drivers/net/ath/ath9k/ar9003_2p2_initvals.h
index b1303bbaa..b2d30fff5 100644
--- a/src/drivers/net/ath/ath9k/ar9003_2p2_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar9003_2p2_initvals.h
@@ -17,6 +17,8 @@
 #ifndef INITVALS_9003_2P2_H
 #define INITVALS_9003_2P2_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /* AR9003 2.2 */
 
 static __unused const u32 ar9300_2p2_radio_postamble[][5] = {
diff --git a/src/drivers/net/ath/ath9k/ar9003_eeprom.h b/src/drivers/net/ath/ath9k/ar9003_eeprom.h
index f03879236..092227564 100644
--- a/src/drivers/net/ath/ath9k/ar9003_eeprom.h
+++ b/src/drivers/net/ath/ath9k/ar9003_eeprom.h
@@ -21,6 +21,7 @@
 #define AR9003_EEPROM_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define AR9300_EEP_VER               0xD000
 #define AR9300_EEP_VER_MINOR_MASK    0xFFF
diff --git a/src/drivers/net/ath/ath9k/ar9003_mac.h b/src/drivers/net/ath/ath9k/ar9003_mac.h
index 6442bb779..a5f7e0432 100644
--- a/src/drivers/net/ath/ath9k/ar9003_mac.h
+++ b/src/drivers/net/ath/ath9k/ar9003_mac.h
@@ -20,6 +20,8 @@
 #ifndef AR9003_MAC_H
 #define AR9003_MAC_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #define AR_DescId	0xffff0000
 #define AR_DescId_S	16
 #define AR_CtrlStat	0x00004000
diff --git a/src/drivers/net/ath/ath9k/ar9003_phy.h b/src/drivers/net/ath/ath9k/ar9003_phy.h
index 443090d27..130b5c65b 100644
--- a/src/drivers/net/ath/ath9k/ar9003_phy.h
+++ b/src/drivers/net/ath/ath9k/ar9003_phy.h
@@ -17,6 +17,8 @@
 #ifndef AR9003_PHY_H
 #define AR9003_PHY_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Channel Register Map
  */
diff --git a/src/drivers/net/ath/ath9k/ar9340_initvals.h b/src/drivers/net/ath/ath9k/ar9340_initvals.h
index 784080b16..5ee400050 100644
--- a/src/drivers/net/ath/ath9k/ar9340_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar9340_initvals.h
@@ -17,6 +17,8 @@
 #ifndef INITVALS_9340_H
 #define INITVALS_9340_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 static __unused const u32 ar9340_1p0_radio_postamble[][5] = {
 	/*  Addr      5G_HT20     5G_HT40     2G_HT40     2G_HT20  */
 	{0x000160ac, 0xa4646800, 0xa4646800, 0xa4646800, 0xa4646800},
diff --git a/src/drivers/net/ath/ath9k/ar9485_initvals.h b/src/drivers/net/ath/ath9k/ar9485_initvals.h
index c854398aa..8892bb1b7 100644
--- a/src/drivers/net/ath/ath9k/ar9485_initvals.h
+++ b/src/drivers/net/ath/ath9k/ar9485_initvals.h
@@ -17,6 +17,8 @@
 #ifndef INITVALS_9485_H
 #define INITVALS_9485_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 static __unused const u32 ar9485_1_1_mac_core[][2] = {
 	/*  Addr       allmodes */
 	{0x00000008, 0x00000000},
diff --git a/src/drivers/net/ath/ath9k/ath9k.c b/src/drivers/net/ath/ath9k/ath9k.c
index 98b7ecd5a..a3020bc65 100644
--- a/src/drivers/net/ath/ath9k/ath9k.c
+++ b/src/drivers/net/ath/ath9k/ath9k.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/pci.h>
 
 #include "ath9k.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k.h b/src/drivers/net/ath/ath9k/ath9k.h
index 36dc97e99..9d62d9b82 100644
--- a/src/drivers/net/ath/ath9k/ath9k.h
+++ b/src/drivers/net/ath/ath9k/ath9k.h
@@ -21,6 +21,7 @@
 #define ATH9K_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "common.h"
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_ani.c b/src/drivers/net/ath/ath9k/ath9k_ani.c
index 76ca79cba..2b0f11c3f 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ani.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ani.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "hw.h"
 #include "hw-ops.h"
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar5008_phy.c b/src/drivers/net/ath/ath9k/ath9k_ar5008_phy.c
index a98e4bb66..622955368 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar5008_phy.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar5008_phy.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/malloc.h>
 #include <ipxe/io.h>
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9002_calib.c b/src/drivers/net/ath/ath9k/ath9k_ar9002_calib.c
index f8978a558..b03da98b3 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9002_calib.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9002_calib.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "hw.h"
 #include "hw-ops.h"
 #include "ar9002_phy.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9002_hw.c b/src/drivers/net/ath/ath9k/ath9k_ar9002_hw.c
index 85d0c7de6..0477af4d1 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9002_hw.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9002_hw.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "hw.h"
 #include "ar5008_initvals.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9002_mac.c b/src/drivers/net/ath/ath9k/ath9k_ar9002_mac.c
index 057756b2e..b6308ffc4 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9002_mac.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9002_mac.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9002_phy.c b/src/drivers/net/ath/ath9k/ath9k_ar9002_phy.c
index 65cfad597..396763533 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9002_phy.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9002_phy.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /**
  * DOC: Programming Atheros 802.11n analog front end radios
  *
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9003_calib.c b/src/drivers/net/ath/ath9k/ath9k_ar9003_calib.c
index c37168bd2..4b6b7f907 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9003_calib.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9003_calib.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9003_eeprom.c b/src/drivers/net/ath/ath9k/ath9k_ar9003_eeprom.c
index 95e54b9b2..96aa9ef2b 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9003_eeprom.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9003_eeprom.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 #include <ipxe/malloc.h>
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9003_hw.c b/src/drivers/net/ath/ath9k/ath9k_ar9003_hw.c
index f3020fd7e..2276ded25 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9003_hw.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9003_hw.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "hw.h"
 #include "ar9003_mac.h"
 #include "ar9003_2p2_initvals.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9003_mac.c b/src/drivers/net/ath/ath9k/ath9k_ar9003_mac.c
index 1fa4039cc..7f1b26182 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9003_mac.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9003_mac.c
@@ -16,6 +16,9 @@
  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
+
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_ar9003_phy.c b/src/drivers/net/ath/ath9k/ath9k_ar9003_phy.c
index b66358b92..ebc10c50f 100644
--- a/src/drivers/net/ath/ath9k/ath9k_ar9003_phy.c
+++ b/src/drivers/net/ath/ath9k/ath9k_ar9003_phy.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_calib.c b/src/drivers/net/ath/ath9k/ath9k_calib.c
index 6f3e07e6d..5da8a5ba0 100644
--- a/src/drivers/net/ath/ath9k/ath9k_calib.c
+++ b/src/drivers/net/ath/ath9k/ath9k_calib.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "hw.h"
 #include "hw-ops.h"
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_common.c b/src/drivers/net/ath/ath9k/ath9k_common.c
index ce33afbd4..474ff6a0c 100644
--- a/src/drivers/net/ath/ath9k/ath9k_common.c
+++ b/src/drivers/net/ath/ath9k/ath9k_common.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 /*
  * Module for common driver code between ath9k and ath9k_htc
  */
diff --git a/src/drivers/net/ath/ath9k/ath9k_eeprom.c b/src/drivers/net/ath/ath9k/ath9k_eeprom.c
index a20423790..95e677591 100644
--- a/src/drivers/net/ath/ath9k/ath9k_eeprom.c
+++ b/src/drivers/net/ath/ath9k/ath9k_eeprom.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_eeprom_4k.c b/src/drivers/net/ath/ath9k/ath9k_eeprom_4k.c
index a42ad3d97..a0ba897aa 100644
--- a/src/drivers/net/ath/ath9k/ath9k_eeprom_4k.c
+++ b/src/drivers/net/ath/ath9k/ath9k_eeprom_4k.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_eeprom_9287.c b/src/drivers/net/ath/ath9k/ath9k_eeprom_9287.c
index ee16a6f18..323a6307e 100644
--- a/src/drivers/net/ath/ath9k/ath9k_eeprom_9287.c
+++ b/src/drivers/net/ath/ath9k/ath9k_eeprom_9287.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_eeprom_def.c b/src/drivers/net/ath/ath9k/ath9k_eeprom_def.c
index 9b144d70b..e4941188f 100644
--- a/src/drivers/net/ath/ath9k/ath9k_eeprom_def.c
+++ b/src/drivers/net/ath/ath9k/ath9k_eeprom_def.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_hw.c b/src/drivers/net/ath/ath9k/ath9k_hw.c
index 554e9be3c..8f123add6 100644
--- a/src/drivers/net/ath/ath9k/ath9k_hw.c
+++ b/src/drivers/net/ath/ath9k/ath9k_hw.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/vsprintf.h>
 #include <ipxe/io.h>
 
diff --git a/src/drivers/net/ath/ath9k/ath9k_init.c b/src/drivers/net/ath/ath9k/ath9k_init.c
index 05ed3336a..2350f724e 100644
--- a/src/drivers/net/ath/ath9k/ath9k_init.c
+++ b/src/drivers/net/ath/ath9k/ath9k_init.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <ipxe/malloc.h>
 #include <ipxe/pci_io.h>
diff --git a/src/drivers/net/ath/ath9k/ath9k_mac.c b/src/drivers/net/ath/ath9k/ath9k_mac.c
index c2f6d630a..d8ef0682f 100644
--- a/src/drivers/net/ath/ath9k/ath9k_mac.c
+++ b/src/drivers/net/ath/ath9k/ath9k_mac.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "hw.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_main.c b/src/drivers/net/ath/ath9k/ath9k_main.c
index 0a17b9bcb..81562c87d 100644
--- a/src/drivers/net/ath/ath9k/ath9k_main.c
+++ b/src/drivers/net/ath/ath9k/ath9k_main.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "ath9k.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_recv.c b/src/drivers/net/ath/ath9k/ath9k_recv.c
index 0ffe9d45a..245e1390a 100644
--- a/src/drivers/net/ath/ath9k/ath9k_recv.c
+++ b/src/drivers/net/ath/ath9k/ath9k_recv.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "ath9k.h"
diff --git a/src/drivers/net/ath/ath9k/ath9k_xmit.c b/src/drivers/net/ath/ath9k/ath9k_xmit.c
index 7f4f28ab8..354cb37a8 100644
--- a/src/drivers/net/ath/ath9k/ath9k_xmit.c
+++ b/src/drivers/net/ath/ath9k/ath9k_xmit.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "ath9k.h"
diff --git a/src/drivers/net/ath/ath9k/calib.h b/src/drivers/net/ath/ath9k/calib.h
index b811accf0..955721d63 100644
--- a/src/drivers/net/ath/ath9k/calib.h
+++ b/src/drivers/net/ath/ath9k/calib.h
@@ -21,6 +21,7 @@
 #define CALIB_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "hw.h"
 
diff --git a/src/drivers/net/ath/ath9k/common.h b/src/drivers/net/ath/ath9k/common.h
index 0fe3b5be6..b3d4fa481 100644
--- a/src/drivers/net/ath/ath9k/common.h
+++ b/src/drivers/net/ath/ath9k/common.h
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "../ath.h"
 
diff --git a/src/drivers/net/ath/ath9k/eeprom.h b/src/drivers/net/ath/ath9k/eeprom.h
index 8a48d6e5f..86521bccf 100644
--- a/src/drivers/net/ath/ath9k/eeprom.h
+++ b/src/drivers/net/ath/ath9k/eeprom.h
@@ -21,6 +21,7 @@
 #define EEPROM_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define AR_EEPROM_MODAL_SPURS   5
 
diff --git a/src/drivers/net/ath/ath9k/hw-ops.h b/src/drivers/net/ath/ath9k/hw-ops.h
index 51c7b08e4..c35be7dd0 100644
--- a/src/drivers/net/ath/ath9k/hw-ops.h
+++ b/src/drivers/net/ath/ath9k/hw-ops.h
@@ -18,6 +18,7 @@
 #define ATH9K_HW_OPS_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "hw.h"
 
diff --git a/src/drivers/net/ath/ath9k/hw.h b/src/drivers/net/ath/ath9k/hw.h
index 051074691..02e9fc346 100644
--- a/src/drivers/net/ath/ath9k/hw.h
+++ b/src/drivers/net/ath/ath9k/hw.h
@@ -21,6 +21,7 @@
 #define HW_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <errno.h>
 
diff --git a/src/drivers/net/ath/ath9k/mac.h b/src/drivers/net/ath/ath9k/mac.h
index 0c0a75948..be0429169 100644
--- a/src/drivers/net/ath/ath9k/mac.h
+++ b/src/drivers/net/ath/ath9k/mac.h
@@ -21,6 +21,7 @@
 #define MAC_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <unistd.h>
 
diff --git a/src/drivers/net/ath/ath9k/phy.h b/src/drivers/net/ath/ath9k/phy.h
index 28f59ecd9..69adbb1a5 100644
--- a/src/drivers/net/ath/ath9k/phy.h
+++ b/src/drivers/net/ath/ath9k/phy.h
@@ -18,6 +18,7 @@
 #define PHY_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define CHANSEL_DIV		15
 #define CHANSEL_2G(_freq)	(((_freq) * 0x10000) / CHANSEL_DIV)
diff --git a/src/drivers/net/ath/ath9k/reg.h b/src/drivers/net/ath/ath9k/reg.h
index 67762b6d1..8e81f4787 100644
--- a/src/drivers/net/ath/ath9k/reg.h
+++ b/src/drivers/net/ath/ath9k/reg.h
@@ -18,6 +18,7 @@
 #define REG_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "../reg.h"
 
diff --git a/src/drivers/net/ath/ath_hw.c b/src/drivers/net/ath/ath_hw.c
index 8e3128868..0a044ea50 100644
--- a/src/drivers/net/ath/ath_hw.c
+++ b/src/drivers/net/ath/ath_hw.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <ipxe/io.h>
 
 #include "ath.h"
diff --git a/src/drivers/net/ath/ath_key.c b/src/drivers/net/ath/ath_key.c
index d269a45ac..217e98ef4 100644
--- a/src/drivers/net/ath/ath_key.c
+++ b/src/drivers/net/ath/ath_key.c
@@ -18,6 +18,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "ath.h"
 #include "reg.h"
 
diff --git a/src/drivers/net/ath/ath_regd.c b/src/drivers/net/ath/ath_regd.c
index 190b1f9f5..0dba257bc 100644
--- a/src/drivers/net/ath/ath_regd.c
+++ b/src/drivers/net/ath/ath_regd.c
@@ -17,6 +17,8 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include "regd.h"
 #include "regd_common.h"
 
diff --git a/src/drivers/net/ath/reg.h b/src/drivers/net/ath/reg.h
index 7982f4344..c4833a515 100644
--- a/src/drivers/net/ath/reg.h
+++ b/src/drivers/net/ath/reg.h
@@ -21,6 +21,7 @@
 #define ATH_REGISTERS_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #define AR_MIBC			0x0040
 #define AR_MIBC_COW		0x00000001
diff --git a/src/drivers/net/ath/regd.h b/src/drivers/net/ath/regd.h
index fd09a0c8d..a0634cd73 100644
--- a/src/drivers/net/ath/regd.h
+++ b/src/drivers/net/ath/regd.h
@@ -21,6 +21,7 @@
 #define REGD_H
 
 FILE_LICENCE ( BSD2 );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include "ath.h"
 
diff --git a/src/drivers/net/ath/regd_common.h b/src/drivers/net/ath/regd_common.h
index ee1ac3f40..1e219c1dd 100644
--- a/src/drivers/net/ath/regd_common.h
+++ b/src/drivers/net/ath/regd_common.h
@@ -20,6 +20,8 @@
 #ifndef REGD_COMMON_H
 #define REGD_COMMON_H
 
+FILE_SECBOOT ( FORBIDDEN );
+
 enum EnumRd {
 	NO_ENUMRD = 0x00,
 	NULL1_WORLD = 0x03,
diff --git a/src/drivers/net/rtl818x/rtl8180.c b/src/drivers/net/rtl818x/rtl8180.c
index b3f685419..d92c8ea67 100644
--- a/src/drivers/net/rtl818x/rtl8180.c
+++ b/src/drivers/net/rtl818x/rtl8180.c
@@ -1,6 +1,7 @@
 /* Realtek 8180 card: rtl818x driver + rtl8180 RF modules */
 
 FILE_LICENCE(GPL2_OR_LATER);
+FILE_SECBOOT(FORBIDDEN);
 
 #include <ipxe/pci.h>
 #include "rtl818x.h"
diff --git a/src/drivers/net/rtl818x/rtl8180_grf5101.c b/src/drivers/net/rtl818x/rtl8180_grf5101.c
index 2b995030c..9e017fd4f 100644
--- a/src/drivers/net/rtl818x/rtl8180_grf5101.c
+++ b/src/drivers/net/rtl818x/rtl8180_grf5101.c
@@ -27,6 +27,7 @@
 #include "rtl818x.h"
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 #define GRF5101_ANTENNA 0xA3
 
diff --git a/src/drivers/net/rtl818x/rtl8180_max2820.c b/src/drivers/net/rtl818x/rtl8180_max2820.c
index ab380fcc7..d3cb15454 100644
--- a/src/drivers/net/rtl818x/rtl8180_max2820.c
+++ b/src/drivers/net/rtl818x/rtl8180_max2820.c
@@ -27,6 +27,7 @@
 #include "rtl818x.h"
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 #define MAXIM_ANTENNA 0xb3
 
diff --git a/src/drivers/net/rtl818x/rtl8180_sa2400.c b/src/drivers/net/rtl818x/rtl8180_sa2400.c
index 9bd62bed8..d86e52aac 100644
--- a/src/drivers/net/rtl818x/rtl8180_sa2400.c
+++ b/src/drivers/net/rtl818x/rtl8180_sa2400.c
@@ -27,6 +27,7 @@
 #include "rtl818x.h"
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 #define SA2400_ANTENNA 0x91
 #define SA2400_DIG_ANAPARAM_PWR1_ON 0x8
diff --git a/src/drivers/net/rtl818x/rtl8185.c b/src/drivers/net/rtl818x/rtl8185.c
index 234978cea..beaf62566 100644
--- a/src/drivers/net/rtl818x/rtl8185.c
+++ b/src/drivers/net/rtl818x/rtl8185.c
@@ -1,6 +1,7 @@
 /* Realtek 8185 card: rtl818x driver + rtl8185_rtl8225 RF module */
 
 FILE_LICENCE(GPL2_OR_LATER);
+FILE_SECBOOT(FORBIDDEN);
 
 #include <ipxe/pci.h>
 #include "rtl818x.h"
diff --git a/src/drivers/net/rtl818x/rtl8185_rtl8225.c b/src/drivers/net/rtl818x/rtl8185_rtl8225.c
index 31a740e64..f810215ca 100644
--- a/src/drivers/net/rtl818x/rtl8185_rtl8225.c
+++ b/src/drivers/net/rtl818x/rtl8185_rtl8225.c
@@ -23,6 +23,7 @@
 #include "rtl818x.h"
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 #define RTL8225_ANAPARAM_ON	0xa0000b59
 #define RTL8225_ANAPARAM2_ON	0x860dec11
diff --git a/src/drivers/net/rtl818x/rtl818x.c b/src/drivers/net/rtl818x/rtl818x.c
index 3bae8a797..81592a7db 100644
--- a/src/drivers/net/rtl818x/rtl818x.c
+++ b/src/drivers/net/rtl818x/rtl818x.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 #include <stdint.h>
 #include <string.h>
diff --git a/src/drivers/net/rtl818x/rtl818x.h b/src/drivers/net/rtl818x/rtl818x.h
index ae4b8a96f..f8d19604e 100644
--- a/src/drivers/net/rtl818x/rtl818x.h
+++ b/src/drivers/net/rtl818x/rtl818x.h
@@ -22,6 +22,7 @@
 #include <ipxe/net80211.h>
 
 FILE_LICENCE(GPL2_ONLY);
+FILE_SECBOOT(FORBIDDEN);
 
 struct rtl818x_csr {
 	u8	MAC[6];
diff --git a/src/net/80211/net80211.c b/src/net/80211/net80211.c
index 482000102..4391b4296 100644
--- a/src/net/80211/net80211.c
+++ b/src/net/80211/net80211.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <string.h>
 #include <byteswap.h>
diff --git a/src/net/80211/rc80211.c b/src/net/80211/rc80211.c
index eea3bc908..d416867fa 100644
--- a/src/net/80211/rc80211.c
+++ b/src/net/80211/rc80211.c
@@ -20,6 +20,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <stdlib.h>
 #include <ipxe/net80211.h>
diff --git a/src/net/80211/sec80211.c b/src/net/80211/sec80211.c
index d1bc75e90..500dec9f5 100644
--- a/src/net/80211/sec80211.c
+++ b/src/net/80211/sec80211.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <stdlib.h>
 #include <string.h>
diff --git a/src/net/80211/wep.c b/src/net/80211/wep.c
index e22ac8998..053cf1417 100644
--- a/src/net/80211/wep.c
+++ b/src/net/80211/wep.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <ipxe/net80211.h>
 #include <ipxe/sec80211.h>
diff --git a/src/net/80211/wpa.c b/src/net/80211/wpa.c
index 17c11b8ed..33358221b 100644
--- a/src/net/80211/wpa.c
+++ b/src/net/80211/wpa.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <ipxe/net80211.h>
 #include <ipxe/sec80211.h>
diff --git a/src/net/80211/wpa_ccmp.c b/src/net/80211/wpa_ccmp.c
index 0abd217e7..f4906d473 100644
--- a/src/net/80211/wpa_ccmp.c
+++ b/src/net/80211/wpa_ccmp.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <string.h>
 #include <ipxe/net80211.h>
diff --git a/src/net/80211/wpa_psk.c b/src/net/80211/wpa_psk.c
index 71190b139..d86204026 100644
--- a/src/net/80211/wpa_psk.c
+++ b/src/net/80211/wpa_psk.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <string.h>
 #include <ipxe/net80211.h>
diff --git a/src/net/80211/wpa_tkip.c b/src/net/80211/wpa_tkip.c
index 3bd651512..39a6391a8 100644
--- a/src/net/80211/wpa_tkip.c
+++ b/src/net/80211/wpa_tkip.c
@@ -18,6 +18,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( FORBIDDEN );
 
 #include <string.h>
 #include <ipxe/net80211.h>
diff --git a/src/net/oncrpc/mount.c b/src/net/oncrpc/mount.c
index 8838a147c..32279cc25 100644
--- a/src/net/oncrpc/mount.c
+++ b/src/net/oncrpc/mount.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdint.h>
 #include <stdlib.h>
 #include <stdio.h>
diff --git a/src/net/oncrpc/nfs.c b/src/net/oncrpc/nfs.c
index b6118f91a..3a3a894f0 100644
--- a/src/net/oncrpc/nfs.c
+++ b/src/net/oncrpc/nfs.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdint.h>
 #include <stdlib.h>
 #include <stdio.h>
diff --git a/src/net/oncrpc/nfs_open.c b/src/net/oncrpc/nfs_open.c
index c0dceb82f..d83991255 100644
--- a/src/net/oncrpc/nfs_open.c
+++ b/src/net/oncrpc/nfs_open.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdint.h>
 #include <stdlib.h>
 #include <stdio.h>
diff --git a/src/net/oncrpc/nfs_uri.c b/src/net/oncrpc/nfs_uri.c
index c4c3f21e9..b97fb91f9 100644
--- a/src/net/oncrpc/nfs_uri.c
+++ b/src/net/oncrpc/nfs_uri.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdlib.h>
 #include <string.h>
 #include <errno.h>
diff --git a/src/net/oncrpc/oncrpc_iob.c b/src/net/oncrpc/oncrpc_iob.c
index be51805e7..04bb20edd 100644
--- a/src/net/oncrpc/oncrpc_iob.c
+++ b/src/net/oncrpc/oncrpc_iob.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdint.h>
 #include <stdlib.h>
 #include <stdio.h>
diff --git a/src/net/oncrpc/portmap.c b/src/net/oncrpc/portmap.c
index df62221dc..be11c42da 100644
--- a/src/net/oncrpc/portmap.c
+++ b/src/net/oncrpc/portmap.c
@@ -17,6 +17,8 @@
  * 02110-1301, USA.
  */
 
+FILE_SECBOOT ( FORBIDDEN );
+
 #include <stdint.h>
 #include <stdlib.h>
 #include <stdio.h>