diff --git a/src/arch/arm/include/bits/endian.h b/src/arch/arm/include/bits/endian.h
index 4506711ad..ab8e2ef9d 100644
--- a/src/arch/arm/include/bits/endian.h
+++ b/src/arch/arm/include/bits/endian.h
@@ -2,6 +2,7 @@
 #define _BITS_ENDIAN_H
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /* ARM may be either little-endian or big-endian */
 #ifdef __ARM_BIG_ENDIAN
diff --git a/src/arch/arm/include/bits/errfile.h b/src/arch/arm/include/bits/errfile.h
index 65f7f719b..251e3682f 100644
--- a/src/arch/arm/include/bits/errfile.h
+++ b/src/arch/arm/include/bits/errfile.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /**
  * @addtogroup errfile Error file identifiers
diff --git a/src/arch/arm/include/bits/io.h b/src/arch/arm/include/bits/io.h
index 272ec12bf..316e644c2 100644
--- a/src/arch/arm/include/bits/io.h
+++ b/src/arch/arm/include/bits/io.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** Page shift */
 #define PAGE_SHIFT 12
diff --git a/src/arch/arm/include/bits/nap.h b/src/arch/arm/include/bits/nap.h
index dbdf37166..ff20a3252 100644
--- a/src/arch/arm/include/bits/nap.h
+++ b/src/arch/arm/include/bits/nap.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /**
  * Sleep until next CPU interrupt
diff --git a/src/arch/arm/include/bits/xen.h b/src/arch/arm/include/bits/xen.h
index 34f647903..33183aaa6 100644
--- a/src/arch/arm/include/bits/xen.h
+++ b/src/arch/arm/include/bits/xen.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /* Hypercall registers */
 #ifdef __aarch64__
diff --git a/src/arch/arm/include/ipxe/arm_io.h b/src/arch/arm/include/ipxe/arm_io.h
index 7ed38993d..57e131edb 100644
--- a/src/arch/arm/include/ipxe/arm_io.h
+++ b/src/arch/arm/include/ipxe/arm_io.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #ifdef IOAPI_ARM
 #define IOAPI_PREFIX_arm
diff --git a/src/arch/arm64/core/arm64_string.c b/src/arch/arm64/core/arm64_string.c
index 07a7eefdf..cdcd3aa2b 100644
--- a/src/arch/arm64/core/arm64_string.c
+++ b/src/arch/arm64/core/arm64_string.c
@@ -28,6 +28,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <string.h>
 
diff --git a/src/arch/arm64/core/arm64_tcpip.c b/src/arch/arm64/core/arm64_tcpip.c
index 0ef04ea42..d89b3b740 100644
--- a/src/arch/arm64/core/arm64_tcpip.c
+++ b/src/arch/arm64/core/arm64_tcpip.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *
diff --git a/src/arch/arm64/include/bits/bigint.h b/src/arch/arm64/include/bits/bigint.h
index f4032e335..a4c351c93 100644
--- a/src/arch/arm64/include/bits/bigint.h
+++ b/src/arch/arm64/include/bits/bigint.h
@@ -7,6 +7,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <string.h>
diff --git a/src/arch/arm64/include/bits/bitops.h b/src/arch/arm64/include/bits/bitops.h
index 4350f622a..343b7c47e 100644
--- a/src/arch/arm64/include/bits/bitops.h
+++ b/src/arch/arm64/include/bits/bitops.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 
diff --git a/src/arch/arm64/include/bits/byteswap.h b/src/arch/arm64/include/bits/byteswap.h
index 169d6c20e..2b78d387b 100644
--- a/src/arch/arm64/include/bits/byteswap.h
+++ b/src/arch/arm64/include/bits/byteswap.h
@@ -10,6 +10,7 @@
 #include <stdint.h>
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 static inline __attribute__ (( always_inline, const )) uint16_t
 __bswap_variable_16 ( uint16_t x ) {
diff --git a/src/arch/arm64/include/bits/compiler.h b/src/arch/arm64/include/bits/compiler.h
index b3e1b30a5..69c05e5e7 100644
--- a/src/arch/arm64/include/bits/compiler.h
+++ b/src/arch/arm64/include/bits/compiler.h
@@ -2,6 +2,7 @@
 #define _BITS_COMPILER_H
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** Dummy relocation type */
 #define RELOC_TYPE_NONE R_AARCH64_NULL
diff --git a/src/arch/arm64/include/bits/profile.h b/src/arch/arm64/include/bits/profile.h
index 4a5b3f7a1..3031cfcc4 100644
--- a/src/arch/arm64/include/bits/profile.h
+++ b/src/arch/arm64/include/bits/profile.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 
diff --git a/src/arch/arm64/include/bits/stdint.h b/src/arch/arm64/include/bits/stdint.h
index 9eb72e9c4..ae14face0 100644
--- a/src/arch/arm64/include/bits/stdint.h
+++ b/src/arch/arm64/include/bits/stdint.h
@@ -1,6 +1,8 @@
 #ifndef _BITS_STDINT_H
 #define _BITS_STDINT_H
 
+FILE_SECBOOT ( PERMITTED );
+
 typedef __SIZE_TYPE__		size_t;
 typedef signed long		ssize_t;
 typedef signed long		off_t;
diff --git a/src/arch/arm64/include/bits/string.h b/src/arch/arm64/include/bits/string.h
index c05fbe346..71898d24f 100644
--- a/src/arch/arm64/include/bits/string.h
+++ b/src/arch/arm64/include/bits/string.h
@@ -2,6 +2,7 @@
 #define BITS_STRING_H
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *
diff --git a/src/arch/arm64/include/bits/strings.h b/src/arch/arm64/include/bits/strings.h
index d5340f484..79286998a 100644
--- a/src/arch/arm64/include/bits/strings.h
+++ b/src/arch/arm64/include/bits/strings.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /**
  * Find first (i.e. least significant) set bit
diff --git a/src/arch/arm64/include/bits/tcpip.h b/src/arch/arm64/include/bits/tcpip.h
index 68686534e..f6ec6f298 100644
--- a/src/arch/arm64/include/bits/tcpip.h
+++ b/src/arch/arm64/include/bits/tcpip.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 extern uint16_t tcpip_continue_chksum ( uint16_t sum, const void *data,
 					size_t len );
diff --git a/src/arch/arm64/include/ipxe/efi/dhcparch.h b/src/arch/arm64/include/ipxe/efi/dhcparch.h
index 21d5a881b..b04034597 100644
--- a/src/arch/arm64/include/ipxe/efi/dhcparch.h
+++ b/src/arch/arm64/include/ipxe/efi/dhcparch.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/dhcp.h>
 
diff --git a/src/arch/arm64/include/limits.h b/src/arch/arm64/include/limits.h
index 8cf87b471..8f2387f3f 100644
--- a/src/arch/arm64/include/limits.h
+++ b/src/arch/arm64/include/limits.h
@@ -1,6 +1,8 @@
 #ifndef LIMITS_H
 #define LIMITS_H	1
 
+FILE_SECBOOT ( PERMITTED );
+
 /* Number of bits in a `char' */
 #define CHAR_BIT	8
 
diff --git a/src/include/ipxe/dummy_pio.h b/src/include/ipxe/dummy_pio.h
index 7c80cdf35..b6138422b 100644
--- a/src/include/ipxe/dummy_pio.h
+++ b/src/include/ipxe/dummy_pio.h
@@ -12,6 +12,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <string.h>