From c7403e7e5dbf4978a35c28bb25296962bc0ebafb Mon Sep 17 00:00:00 2001
From: Michael Brown <mcb30@ipxe.org>
Date: Wed, 14 Jan 2026 22:37:05 +0000
Subject: [PATCH] [build] Mark more reviewed files as permitted for UEFI Secure
 Boot

Mark dynamic keyboard map support and the "pciscan", "usbscan", and
"time" commands as permitted for UEFI Secure Boot, on the basis that
these features have previously been present in binaries signed by
Microsoft.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---
 src/core/dynkeymap.c        | 1 +
 src/hci/commands/pci_cmd.c  | 1 +
 src/hci/commands/time_cmd.c | 1 +
 src/hci/commands/usb_cmd.c  | 1 +
 4 files changed, 4 insertions(+)

diff --git a/src/core/dynkeymap.c b/src/core/dynkeymap.c
index 2f7c49937..fa9d3cb0f 100644
--- a/src/core/dynkeymap.c
+++ b/src/core/dynkeymap.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *
diff --git a/src/hci/commands/pci_cmd.c b/src/hci/commands/pci_cmd.c
index 0b54902fb..2e9505752 100644
--- a/src/hci/commands/pci_cmd.c
+++ b/src/hci/commands/pci_cmd.c
@@ -30,6 +30,7 @@
 #include <ipxe/parseopt.h>
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *
diff --git a/src/hci/commands/time_cmd.c b/src/hci/commands/time_cmd.c
index aba080792..2199321c7 100644
--- a/src/hci/commands/time_cmd.c
+++ b/src/hci/commands/time_cmd.c
@@ -21,6 +21,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdio.h>
 #include <stdlib.h>
diff --git a/src/hci/commands/usb_cmd.c b/src/hci/commands/usb_cmd.c
index 2e3a82371..17affc0d7 100644
--- a/src/hci/commands/usb_cmd.c
+++ b/src/hci/commands/usb_cmd.c
@@ -30,6 +30,7 @@
 #include <ipxe/parseopt.h>
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /** @file
  *