diff --git a/etc/dnf/protected.d/sdubby.conf b/etc/dnf/protected.d/sdubby.conf
new file mode 100644
index 00000000..68c5d2d7
--- /dev/null
+++ b/etc/dnf/protected.d/sdubby.conf
@@ -0,0 +1 @@
+sdubby
diff --git a/etc/dnf/protected.d/systemd-boot-unsigned.conf b/etc/dnf/protected.d/systemd-boot-unsigned.conf
new file mode 100644
index 00000000..36e92cab
--- /dev/null
+++ b/etc/dnf/protected.d/systemd-boot-unsigned.conf
@@ -0,0 +1 @@
+systemd-boot-unsigned