diff --git a/src/include/bits/acpi.h b/src/include/bits/acpi.h
index d98420502..28b7f93c1 100644
--- a/src/include/bits/acpi.h
+++ b/src/include/bits/acpi.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_ACPI_H */
diff --git a/src/include/bits/hyperv.h b/src/include/bits/hyperv.h
index fd7ceeea3..4b8de91de 100644
--- a/src/include/bits/hyperv.h
+++ b/src/include/bits/hyperv.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_HYPERV_H */
diff --git a/src/include/bits/iomap.h b/src/include/bits/iomap.h
index b3d8d0c0d..860ef8966 100644
--- a/src/include/bits/iomap.h
+++ b/src/include/bits/iomap.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_IOMAP_H */
diff --git a/src/include/bits/memmap.h b/src/include/bits/memmap.h
index d51ee4993..425b909ae 100644
--- a/src/include/bits/memmap.h
+++ b/src/include/bits/memmap.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_MEMMAP_H */
diff --git a/src/include/bits/mp.h b/src/include/bits/mp.h
index d7d2cdc28..b2e719a19 100644
--- a/src/include/bits/mp.h
+++ b/src/include/bits/mp.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_MP_H */
diff --git a/src/include/bits/nap.h b/src/include/bits/nap.h
index 7b01f94e6..b22f45e7e 100644
--- a/src/include/bits/nap.h
+++ b/src/include/bits/nap.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_NAP_H */
diff --git a/src/include/bits/ns16550.h b/src/include/bits/ns16550.h
index 45e3e978f..5bbf1cf40 100644
--- a/src/include/bits/ns16550.h
+++ b/src/include/bits/ns16550.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <ipxe/io.h>
diff --git a/src/include/bits/pci_io.h b/src/include/bits/pci_io.h
index 711449f19..a8d7dbcfd 100644
--- a/src/include/bits/pci_io.h
+++ b/src/include/bits/pci_io.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_PCI_IO_H */
diff --git a/src/include/bits/reboot.h b/src/include/bits/reboot.h
index 023647fd6..3d6bc7047 100644
--- a/src/include/bits/reboot.h
+++ b/src/include/bits/reboot.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_REBOOT_H */
diff --git a/src/include/bits/sanboot.h b/src/include/bits/sanboot.h
index addbb5b07..a9a9cf401 100644
--- a/src/include/bits/sanboot.h
+++ b/src/include/bits/sanboot.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_SANBOOT_H */
diff --git a/src/include/bits/smbios.h b/src/include/bits/smbios.h
index 3e06aadb4..b1912cd1e 100644
--- a/src/include/bits/smbios.h
+++ b/src/include/bits/smbios.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_SMBIOS_H */
diff --git a/src/include/bits/tcpip.h b/src/include/bits/tcpip.h
index 9cb54d432..b0309aad5 100644
--- a/src/include/bits/tcpip.h
+++ b/src/include/bits/tcpip.h
@@ -11,6 +11,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 
diff --git a/src/include/bits/time.h b/src/include/bits/time.h
index aec9c2f39..814e57f22 100644
--- a/src/include/bits/time.h
+++ b/src/include/bits/time.h
@@ -11,5 +11,6 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #endif /* _BITS_TIME_H */
diff --git a/src/include/bits/xen.h b/src/include/bits/xen.h
index 7d0036bc0..bb6f109b2 100644
--- a/src/include/bits/xen.h
+++ b/src/include/bits/xen.h
@@ -10,6 +10,7 @@
  *
  */
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/nonxen.h>