[efi] Mark imported EDK2 headers as permitted for Secure Boot

Signed-off-by: Michael Brown <mcb30@ipxe.org>

src/include/ipxe/efi/AArch64/ProcessorBind.h

@@ -13,6 +13,7 @@
 #define __PROCESSOR_BIND_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Define the processor type so other code can make processor based choices

src/include/ipxe/efi/Base.h

@@ -16,6 +16,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __BASE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // Include processor specific binding

src/include/ipxe/efi/Guid/Acpi.h

@@ -17,6 +17,7 @@
 #define __ACPI_GUID_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define ACPI_TABLE_GUID \
   { \

src/include/ipxe/efi/Guid/Fdt.h

@@ -10,6 +10,7 @@
 #define __FDT_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define FDT_TABLE_GUID \
   { 0xb1b621d5, 0xf19c, 0x41a5, { 0x83, 0x0b, 0xd9, 0x15, 0x2c, 0x69, 0xaa, 0xe0 } }

src/include/ipxe/efi/Guid/FileInfo.h

@@ -12,6 +12,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __FILE_INFO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_FILE_INFO_ID \
   { \

src/include/ipxe/efi/Guid/FileSystemInfo.h

@@ -12,6 +12,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __FILE_SYSTEM_INFO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_FILE_SYSTEM_INFO_ID \
   { \

src/include/ipxe/efi/Guid/GlobalVariable.h

@@ -12,6 +12,7 @@
 #define __GLOBAL_VARIABLE_GUID_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_GLOBAL_VARIABLE \
   { \

src/include/ipxe/efi/Guid/HiiFormMapMethodGuid.h

@@ -12,6 +12,7 @@
 #define __EFI_HII_FORMMAP_GUID_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_HII_STANDARD_FORM_GUID \
   { 0x3bd2f4ec, 0xe524, 0x46e4, { 0xa9, 0xd8, 0x51, 0x1, 0x17, 0x42, 0x55, 0x62 } }

src/include/ipxe/efi/Guid/HiiPlatformSetupFormset.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __HII_PLATFORM_SETUP_FORMSET_GUID_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_HII_PLATFORM_SETUP_FORMSET_GUID \
   { 0x93039971, 0x8545, 0x4b04, { 0xb4, 0x5e, 0x32, 0xeb, 0x83, 0x26, 0x4, 0xe } }

src/include/ipxe/efi/Guid/ImageAuthentication.h

@@ -12,6 +12,7 @@
 #define __IMAGE_AUTHTICATION_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Guid/GlobalVariable.h>
 #include <ipxe/efi/Protocol/Hash.h>

src/include/ipxe/efi/Guid/MdeModuleHii.h

@@ -10,6 +10,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __MDEMODULE_HII_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define NARROW_CHAR        0xFFF0
 #define WIDE_CHAR          0xFFF1

src/include/ipxe/efi/Guid/MicrosoftVendor.h

@@ -20,6 +20,7 @@
 #define MICROSOFT_VENDOR_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Uefi/UefiBaseType.h>
 

src/include/ipxe/efi/Guid/PcAnsi.h

@@ -13,6 +13,7 @@
 #define __PC_ANSI_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_PC_ANSI_GUID \
   { \

src/include/ipxe/efi/Guid/Rng.h

@@ -11,6 +11,7 @@
 #define RNG_GUID_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 typedef struct _EFI_RNG_INTERFACE EFI_RNG_INTERFACE;
 

src/include/ipxe/efi/Guid/SmBios.h

@@ -17,6 +17,7 @@
 #define __SMBIOS_GUID_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define SMBIOS_TABLE_GUID \
   { \

src/include/ipxe/efi/Guid/TlsAuthentication.h

@@ -10,6 +10,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __TLS_AUTHENTICATION_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 // Private variable for CA Certificate configuration
 //

src/include/ipxe/efi/Guid/WinCertificate.h

@@ -12,6 +12,7 @@
 #define __EFI_WIN_CERTIFICATE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // _WIN_CERTIFICATE.wCertificateType

src/include/ipxe/efi/Ia32/ProcessorBind.h

@@ -10,6 +10,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PROCESSOR_BIND_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Define the processor type so other code can make processor based choices.

src/include/ipxe/efi/IndustryStandard/Acpi10.h

@@ -10,6 +10,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define _ACPI_1_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/AcpiAml.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi20.h

@@ -9,6 +9,7 @@
 #define _ACPI_2_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi10.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi30.h

@@ -10,6 +10,7 @@
 #define _ACPI_3_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi20.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi40.h

@@ -10,6 +10,7 @@
 #define _ACPI_4_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi30.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi50.h

@@ -12,6 +12,7 @@
 #define _ACPI_5_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi40.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi51.h

@@ -13,6 +13,7 @@
 #define _ACPI_5_1_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi50.h>
 

src/include/ipxe/efi/IndustryStandard/Acpi60.h

@@ -12,6 +12,7 @@
 #define _ACPI_6_0_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Acpi51.h>
 

src/include/ipxe/efi/IndustryStandard/AcpiAml.h

@@ -11,6 +11,7 @@
 #define _ACPI_AML_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // ACPI AML definition

src/include/ipxe/efi/IndustryStandard/Bluetooth.h

@@ -11,6 +11,7 @@
 #define _BLUETOOTH_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #pragma pack(1)
 

src/include/ipxe/efi/IndustryStandard/Pci22.h

@@ -17,6 +17,7 @@
 #define _PCI22_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define PCI_MAX_BUS     255
 #define PCI_MAX_DEVICE  31

src/include/ipxe/efi/IndustryStandard/PeImage.h

@@ -20,6 +20,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PE_IMAGE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // PE32+ Subsystem type for EFI images

src/include/ipxe/efi/IndustryStandard/Tpm12.h

@@ -10,6 +10,7 @@
 #define _TPM12_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// The start of TPM return codes

src/include/ipxe/efi/IndustryStandard/Tpm20.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define _TPM20_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Tpm12.h>
 

src/include/ipxe/efi/IndustryStandard/UefiTcgPlatform.h

@@ -11,6 +11,7 @@
 #define __UEFI_TCG_PLATFORM_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/Tpm12.h>
 #include <ipxe/efi/IndustryStandard/Tpm20.h>

src/include/ipxe/efi/IndustryStandard/Usb.h

@@ -12,6 +12,7 @@
 #define __USB_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // Subset of Class and Subclass definitions from USB Specs

src/include/ipxe/efi/Library/BaseLib.h

@@ -17,6 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __BASE_LIB__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // Definitions for architecture-specific types

src/include/ipxe/efi/LoongArch64/ProcessorBind.h

@@ -11,6 +11,7 @@
 #define PROCESSOR_BIND_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // Define the processor type so other code can make processor based choices

src/include/ipxe/efi/Pi/PiBootMode.h

@@ -13,6 +13,7 @@
 #define __PI_BOOT_MODE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// EFI boot mode

src/include/ipxe/efi/Pi/PiDependency.h

@@ -13,6 +13,7 @@
 #define __PI_DEPENDENCY_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// If present, this must be the first and only opcode,

src/include/ipxe/efi/Pi/PiDxeCis.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_DXECIS_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Uefi/UefiMultiPhase.h>
 #include <ipxe/efi/Pi/PiMultiPhase.h>

src/include/ipxe/efi/Pi/PiFirmwareFile.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_FIRMWARE_FILE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #pragma pack(1)
 ///

src/include/ipxe/efi/Pi/PiFirmwareVolume.h

@@ -13,6 +13,7 @@
 #define __PI_FIRMWAREVOLUME_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// EFI_FV_FILE_ATTRIBUTES

src/include/ipxe/efi/Pi/PiHob.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_HOB_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // HobType of EFI_HOB_GENERIC_HEADER.

src/include/ipxe/efi/Pi/PiMultiPhase.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_MULTIPHASE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Pi/PiFirmwareVolume.h>
 #include <ipxe/efi/Pi/PiFirmwareFile.h>

src/include/ipxe/efi/Pi/PiS3BootScript.h

@@ -11,6 +11,7 @@
 #define _PI_S3_BOOT_SCRIPT_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 // *******************************************
 // EFI Boot Script Opcode definitions

src/include/ipxe/efi/Pi/PiStatusCode.h

@@ -15,6 +15,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_STATUS_CODE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // Required for IA32, X64, IPF, and EBC defines for CPU exception types

src/include/ipxe/efi/PiDxe.h

@@ -11,6 +11,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PI_DXE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Uefi/UefiBaseType.h>
 #include <ipxe/efi/Uefi/UefiSpec.h>

src/include/ipxe/efi/Protocol/AbsolutePointer.h

@@ -14,6 +14,7 @@
 #define __ABSOLUTE_POINTER_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_ABSOLUTE_POINTER_PROTOCOL_GUID \
   { 0x8D59D32B, 0xC655, 0x4AE9, { 0x9B, 0x15, 0xF2, 0x59, 0x04, 0x99, 0x2A, 0x43 } }

src/include/ipxe/efi/Protocol/AcpiTable.h

@@ -14,6 +14,7 @@
 #define __ACPI_TABLE_H___
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_ACPI_TABLE_PROTOCOL_GUID \
   { 0xffe06bdd, 0x6107, 0x46a6, { 0x7b, 0xb2, 0x5a, 0x9c, 0x7e, 0xc5, 0x27, 0x5c }}

src/include/ipxe/efi/Protocol/AdapterInformation.h

@@ -15,6 +15,7 @@
 #define __EFI_ADAPTER_INFORMATION_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_ADAPTER_INFORMATION_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Arp.h

@@ -19,6 +19,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_ARP_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_ARP_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/BlockIo.h

@@ -13,6 +13,7 @@
 #define __BLOCK_IO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_BLOCK_IO_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/BlockIo2.h

@@ -14,6 +14,7 @@
 #define __BLOCK_IO2_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/BlockIo.h>
 

src/include/ipxe/efi/Protocol/BusSpecificDriverOverride.h

@@ -15,6 +15,7 @@
 #define _EFI_BUS_SPECIFIC_DRIVER_OVERRIDE_PROTOCOL_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Global ID for the Bus Specific Driver Override Protocol

src/include/ipxe/efi/Protocol/ComponentName.h

@@ -12,6 +12,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_COMPONENT_NAME_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// The global ID for the Component Name Protocol.

src/include/ipxe/efi/Protocol/ComponentName2.h

@@ -12,6 +12,7 @@
 #define __EFI_COMPONENT_NAME2_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Global ID for the Component Name Protocol

src/include/ipxe/efi/Protocol/ConsoleControl/ConsoleControl.h

@@ -26,6 +26,7 @@ Abstract:
 #define __CONSOLE_CONTROL_H__
 
 FILE_LICENCE ( BSD3 );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_CONSOLE_CONTROL_PROTOCOL_GUID \
   { 0xf42f7782, 0x12e, 0x4c12, {0x99, 0x56, 0x49, 0xf9, 0x43, 0x4, 0xf7, 0x21} }

src/include/ipxe/efi/Protocol/DebugSupport.h

@@ -17,6 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __DEBUG_SUPPORT_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/IndustryStandard/PeImage.h>
 

src/include/ipxe/efi/Protocol/DevicePath.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_DEVICE_PATH_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Guid/PcAnsi.h>
 #include <ipxe/efi/IndustryStandard/Bluetooth.h>

src/include/ipxe/efi/Protocol/DevicePathToText.h

@@ -11,6 +11,7 @@
 #define __DEVICE_PATH_TO_TEXT_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Device Path To Text protocol

src/include/ipxe/efi/Protocol/Dhcp4.h

@@ -16,6 +16,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_DHCP4_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_DHCP4_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Dhcp6.h

@@ -14,6 +14,7 @@
 #define __EFI_DHCP6_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_DHCP6_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/DiskIo.h

@@ -14,6 +14,7 @@
 #define __DISK_IO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_DISK_IO_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Dns4.h

@@ -16,6 +16,7 @@
 #define __EFI_DNS4_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_DNS4_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Dns6.h

@@ -16,6 +16,7 @@
 #define __EFI_DNS6_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_DNS6_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/DriverBinding.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_DRIVER_BINDING_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// The global ID for the ControllerHandle Driver Protocol.

src/include/ipxe/efi/Protocol/EapConfiguration.h

@@ -13,6 +13,7 @@
 #define __EFI_EAP_CONFIGURATION_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// EFI EAP Configuration protocol provides a way to set and get EAP configuration.

src/include/ipxe/efi/Protocol/FormBrowser2.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_FORM_BROWSER2_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Guid/HiiPlatformSetupFormset.h>
 

src/include/ipxe/efi/Protocol/GraphicsOutput.h

@@ -12,6 +12,7 @@
 #define __GRAPHICS_OUTPUT_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_GRAPHICS_OUTPUT_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Hash.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_HASH_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_HASH_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/HiiConfigAccess.h

@@ -17,6 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_HII_CONFIG_ACCESS_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/FormBrowser2.h>
 

src/include/ipxe/efi/Protocol/HiiDatabase.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __HII_DATABASE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_HII_DATABASE_PROTOCOL_GUID \
   { 0xef9fc172, 0xa1b2, 0x4693, { 0xb3, 0x27, 0x6d, 0x32, 0xfc, 0x41, 0x60, 0x42 } }

src/include/ipxe/efi/Protocol/HiiFont.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __HII_FONT_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/GraphicsOutput.h>
 #include <ipxe/efi/Protocol/HiiImage.h>

src/include/ipxe/efi/Protocol/HiiImage.h

@@ -13,6 +13,7 @@
 #define __HII_IMAGE_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/GraphicsOutput.h>
 

src/include/ipxe/efi/Protocol/Http.h

@@ -17,6 +17,7 @@
 #define __EFI_HTTP_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_HTTP_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Ip4.h

@@ -22,6 +22,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_IP4_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/ManagedNetwork.h>
 

src/include/ipxe/efi/Protocol/Ip4Config.h

@@ -17,6 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_IP4CONFIG_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/Ip4.h>
 

src/include/ipxe/efi/Protocol/Ip4Config2.h

@@ -14,6 +14,7 @@ This Protocol is introduced in UEFI Specification 2.5
 #define __EFI_IP4CONFIG2_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/Ip4.h>
 

src/include/ipxe/efi/Protocol/Ip6.h

@@ -22,6 +22,7 @@
 #define __EFI_IP6_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/ManagedNetwork.h>
 

src/include/ipxe/efi/Protocol/Ip6Config.h

@@ -11,6 +11,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_IP6CONFIG_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/Ip6.h>
 

src/include/ipxe/efi/Protocol/LoadFile.h

@@ -16,6 +16,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_LOAD_FILE_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_LOAD_FILE_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/LoadFile2.h

@@ -16,6 +16,7 @@
 #define __EFI_LOAD_FILE2_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_LOAD_FILE2_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/LoadedImage.h

@@ -13,6 +13,7 @@
 #define __LOADED_IMAGE_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_LOADED_IMAGE_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/ManagedNetwork.h

@@ -14,6 +14,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_MANAGED_NETWORK_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/SimpleNetwork.h>
 

src/include/ipxe/efi/Protocol/MpService.h

@@ -40,6 +40,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define _MP_SERVICE_PROTOCOL_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Global ID for the EFI_MP_SERVICES_PROTOCOL.

src/include/ipxe/efi/Protocol/Mtftp4.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_MTFTP4_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_MTFTP4_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Mtftp6.h

@@ -17,6 +17,7 @@
 #define __EFI_MTFTP6_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_MTFTP6_SERVICE_BINDING_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/NetworkInterfaceIdentifier.h

@@ -13,6 +13,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __EFI_NETWORK_INTERFACE_IDENTIFER_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 //
 // GUID retired from UEFI Specification 2.1b

src/include/ipxe/efi/Protocol/PciIo.h

@@ -11,6 +11,7 @@
 #define __PCI_IO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Global ID for the PCI I/O Protocol

src/include/ipxe/efi/Protocol/PciRootBridgeIo.h

@@ -14,6 +14,7 @@
 #define __PCI_ROOT_BRIDGE_IO_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Library/BaseLib.h>
 

src/include/ipxe/efi/Protocol/PxeBaseCode.h

@@ -17,6 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __PXE_BASE_CODE_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// PXE Base Code protocol.

src/include/ipxe/efi/Protocol/Rng.h

@@ -12,6 +12,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define EFI_RNG_PROTOCOL_H_
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Guid/Rng.h>
 

src/include/ipxe/efi/Protocol/SerialIo.h

@@ -13,6 +13,7 @@
 #define __SERIAL_IO_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SERIAL_IO_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/ServiceBinding.h

@@ -14,6 +14,7 @@
 #define __EFI_SERVICE_BINDING_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 ///
 /// Forward reference for pure ANSI compatability

src/include/ipxe/efi/Protocol/SimpleFileSystem.h

@@ -16,6 +16,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __SIMPLE_FILE_SYSTEM_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SIMPLE_FILE_SYSTEM_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/SimpleNetwork.h

@@ -21,6 +21,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __SIMPLE_NETWORK_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SIMPLE_NETWORK_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/SimplePointer.h

@@ -12,6 +12,7 @@
 #define __SIMPLE_POINTER_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SIMPLE_POINTER_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/SimpleTextIn.h

@@ -13,6 +13,7 @@
 #define __SIMPLE_TEXT_IN_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SIMPLE_TEXT_INPUT_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/SimpleTextInEx.h

@@ -14,6 +14,7 @@
 #define __SIMPLE_TEXT_IN_EX_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/SimpleTextIn.h>
 

src/include/ipxe/efi/Protocol/SimpleTextOut.h

@@ -15,6 +15,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #define __SIMPLE_TEXT_OUT_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_SIMPLE_TEXT_OUTPUT_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/StorageSecurityCommand.h

@@ -14,6 +14,7 @@
 #define __STORAGE_SECURITY_COMMAND_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #define EFI_STORAGE_SECURITY_COMMAND_PROTOCOL_GUID \
   { \

src/include/ipxe/efi/Protocol/Supplicant.h

@@ -13,6 +13,7 @@
 #define __EFI_SUPPLICANT_PROTOCOL_H__
 
 FILE_LICENCE ( BSD2_PATENT );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/efi/Protocol/WiFi2.h>