diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
index 68c1d6c..61b5ae3 100644
--- a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native.bbappend
@@ -1,4 +1,7 @@
 FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
 
-SRC_URI += "file://fb_host_settings.override.yml"
+SRC_URI:append = " file://fb_host_settings.override.yml"
+SRC_URI:append:fb-compute = " file://restrictionmode-host-settings.override.yml"
+
 SETTINGS_HOST_TEMPLATES:append = " fb_host_settings.override.yml"
+SETTINGS_HOST_TEMPLATES:append:fb-compute = " restrictionmode-host-settings.override.yml"
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml
new file mode 100644
index 0000000..5b52a69
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-defaults-native/fb-compute/restrictionmode-host-settings.override.yml
@@ -0,0 +1,5 @@
+/xyz/openbmc_project/control/host{}/restriction_mode:
+    - Interface: xyz.openbmc_project.Control.Security.RestrictionMode
+      Properties:
+          RestrictionMode:
+              Default: RestrictionMode::Modes::Whitelist
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml
new file mode 100644
index 0000000..1e2c3a2
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager/restrictionmode-ocpdebugcard-settings.override.yml
@@ -0,0 +1,5 @@
+/xyz/openbmc_project/control/ocp_debug_card/restriction_mode:
+    - Interface: xyz.openbmc_project.Control.Security.RestrictionMode
+      Properties:
+          RestrictionMode:
+              Default: RestrictionMode::Modes::Whitelist
diff --git a/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend
new file mode 100644
index 0000000..e0e2f84
--- /dev/null
+++ b/meta-facebook/recipes-phosphor/settings/phosphor-settings-manager_%.bbappend
@@ -0,0 +1,3 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
+
+SRC_URI:append = " file://restrictionmode-ocpdebugcard-settings.override.yml"