diff --git a/calamares/modules/initcpio-linux-zen.conf b/calamares/modules/initcpio-linux-zen.conf
index 0998e8e..ae9295f 100644
--- a/calamares/modules/initcpio-linux-zen.conf
+++ b/calamares/modules/initcpio-linux-zen.conf
@@ -1,3 +1,26 @@
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+#
+# Run mkinitcpio(8) with the given preset value
+---
+# This key defines the kernel to be loaded.
+# It can have the following values:
+#  - the name of a single mkinitcpio preset
+#  - empty or unset
+#  - the literal string "all"
+#
+# If kernel is set to "all" or empty/unset then mkinitpio is called for all
+# kernels.  Otherwise it is called with a single preset with the value
+# contained in kernel.
+#
 kernel: linux-zen
 
-be_unsafe: false
+# Set this to true to turn off mitigations for lax file
+# permissions on initramfs (which, in turn, can compromise
+# your LUKS encryption keys, CVS-2019-13179).
+#
+# If your initramfs are stored in the EFI partition or another non-POSIX
+# filesystem, this has no effect as the file permissions cannot be changed.
+# In this case, ensure the partition is mounted securely.
+#
+be_unsafe: false
\ No newline at end of file
diff --git a/calamares/modules/initcpio-linux.conf b/calamares/modules/initcpio-linux.conf
index 97f9b30..ae9295f 100644
--- a/calamares/modules/initcpio-linux.conf
+++ b/calamares/modules/initcpio-linux.conf
@@ -1,3 +1,26 @@
-kernel: linux
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+#
+# Run mkinitcpio(8) with the given preset value
+---
+# This key defines the kernel to be loaded.
+# It can have the following values:
+#  - the name of a single mkinitcpio preset
+#  - empty or unset
+#  - the literal string "all"
+#
+# If kernel is set to "all" or empty/unset then mkinitpio is called for all
+# kernels.  Otherwise it is called with a single preset with the value
+# contained in kernel.
+#
+kernel: linux-zen
 
-be_unsafe: false
+# Set this to true to turn off mitigations for lax file
+# permissions on initramfs (which, in turn, can compromise
+# your LUKS encryption keys, CVS-2019-13179).
+#
+# If your initramfs are stored in the EFI partition or another non-POSIX
+# filesystem, this has no effect as the file permissions cannot be changed.
+# In this case, ensure the partition is mounted securely.
+#
+be_unsafe: false
\ No newline at end of file