From: Michael Brown <mcb30@ipxe.org>
Date: Fri, 13 Feb 2026 14:04:07 +0000 (+0000)
Subject: [build] Mark Xen HVM files as permitted for UEFI Secure Boot
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c9158cb32ca0d54181ff87ba915933476f8236d0;p=thirdparty%2Fipxe.git

[build] Mark Xen HVM files as permitted for UEFI Secure Boot

The Xen netfront driver and the core architecture-independent files
such as xenstore.c and xenbus.c are already marked as permitted for
UEFI Secure Boot, but the x86-specific HVM driver (which attaches to
the PCI device and instantiates the Xen devices) is not.

Review the HVM-specific files and mark them as permitted for UEFI
Secure Boot.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/src/arch/x86/drivers/xen/hvm.c b/src/arch/x86/drivers/xen/hvm.c
index cf41cc955..4fbc1c001 100644
--- a/src/arch/x86/drivers/xen/hvm.c
+++ b/src/arch/x86/drivers/xen/hvm.c
@@ -22,6 +22,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <stdio.h>
diff --git a/src/arch/x86/drivers/xen/hvm.h b/src/arch/x86/drivers/xen/hvm.h
index 88e490815..730fc4f6b 100644
--- a/src/arch/x86/drivers/xen/hvm.h
+++ b/src/arch/x86/drivers/xen/hvm.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <stdint.h>
 #include <ipxe/xen.h>
diff --git a/src/arch/x86_64/include/ipxe/msr.h b/src/arch/x86_64/include/ipxe/msr.h
index 316243b69..476127782 100644
--- a/src/arch/x86_64/include/ipxe/msr.h
+++ b/src/arch/x86_64/include/ipxe/msr.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 /**
  * Read model-specific register
diff --git a/src/include/ipxe/xenmem.h b/src/include/ipxe/xenmem.h
index dcc38d460..44eba7ba7 100644
--- a/src/include/ipxe/xenmem.h
+++ b/src/include/ipxe/xenmem.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/xen.h>
 #include <xen/memory.h>
diff --git a/src/include/ipxe/xenver.h b/src/include/ipxe/xenver.h
index 5d820a6e7..6a1dd1278 100644
--- a/src/include/ipxe/xenver.h
+++ b/src/include/ipxe/xenver.h
@@ -8,6 +8,7 @@
  */
 
 FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
+FILE_SECBOOT ( PERMITTED );
 
 #include <ipxe/xen.h>
 #include <xen/version.h>