From c07fb71a914d5eb62cb824d27a1e4f277366a2cf Mon Sep 17 00:00:00 2001
From: Michael Brown <mcb30@ipxe.org>
Date: Wed, 28 Jan 2026 16:12:40 +0000
Subject: [PATCH] [build] Mark FDT management tools as permitted for UEFI
 Secure Boot

An EFI build of iPXE does not directly make use of a flattened device
tree (FDT) itself, but may pass on a device tree that the user chose
to download using the "fdt" command.

Review the simple files used to implement the "fdt" command and mark
these as permitted for UEFI Secure Boot.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---
 src/hci/commands/fdt_cmd.c | 1 +
 src/include/usr/fdtmgmt.h  | 1 +
 src/usr/fdtmgmt.c          | 1 +
 3 files changed, 3 insertions(+)

diff --git a/src/hci/commands/fdt_cmd.c b/src/hci/commands/fdt_cmd.c
index 7cd39279b..cc3509fc4 100644
--- a/src/hci/commands/fdt_cmd.c
+++ b/src/hci/commands/fdt_cmd.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <getopt.h>
 #include <ipxe/command.h>
diff --git a/src/include/usr/fdtmgmt.h b/src/include/usr/fdtmgmt.h
index 3d3aef859..182df2974 100644
--- a/src/include/usr/fdtmgmt.h
+++ b/src/include/usr/fdtmgmt.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/image.h>
 
diff --git a/src/usr/fdtmgmt.c b/src/usr/fdtmgmt.c
index dabeef2c8..9952ec47a 100644
--- a/src/usr/fdtmgmt.c
+++ b/src/usr/fdtmgmt.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/fdt.h>
 #include <usr/fdtmgmt.h>