diff --git a/edk2-build.fedora b/edk2-build.fedora
index 0bf1276..531d810 100644
--- a/edk2-build.fedora
+++ b/edk2-build.fedora
@@ -47,6 +47,7 @@ TPM2_CONFIG_ENABLE       = FALSE
 
 [pcds.nx.strict]
 PcdDxeNxMemoryProtectionPolicy = 0xC000000000007FD5
+PcdImageProtectionPolicy       = 0x03
 # Default is FALSE, so there no need to actually set it.
 #PcdUninstallMemAttrProtocol    = FALSE