diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 8b35df289..c605302d9 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -207,9 +207,9 @@ ls - noexec. runner
 lsattr - noexec. runner
 lsmod - noexec
 lsof - complex
-lspci - noexec candidate, too rare to bother for nofork
-lsscsi - noexec candidate, too rare to bother for nofork
-lsusb - noexec candidate, too rare to bother for nofork
+lspci - noexec. too rare to bother for nofork
+lsscsi - noexec. too rare to bother for nofork
+lsusb - noexec. too rare to bother for nofork
 lzcat - runner
 lzma - runner
 lzop - runner
diff --git a/miscutils/lsscsi.c b/miscutils/lsscsi.c
index c86630e31..d7cd51056 100644
--- a/miscutils/lsscsi.c
+++ b/miscutils/lsscsi.c
@@ -16,7 +16,7 @@
 //config:
 //config:	This version uses sysfs (/sys/bus/scsi/devices) only.
 
-//applet:IF_LSSCSI(APPLET(lsscsi, BB_DIR_USR_BIN, BB_SUID_DROP))
+//applet:IF_LSSCSI(APPLET_NOEXEC(lsscsi, lsscsi, BB_DIR_USR_BIN, BB_SUID_DROP, lsscsi))
 
 //kbuild:lib-$(CONFIG_LSSCSI) += lsscsi.o
 
diff --git a/util-linux/lspci.c b/util-linux/lspci.c
index 3877deb67..0000fbfda 100644
--- a/util-linux/lspci.c
+++ b/util-linux/lspci.c
@@ -16,7 +16,7 @@
 //config:
 //config:	This version uses sysfs (/sys/bus/pci/devices) only.
 
-//applet:IF_LSPCI(APPLET(lspci, BB_DIR_USR_BIN, BB_SUID_DROP))
+//applet:IF_LSPCI(APPLET_NOEXEC(lspci, lspci, BB_DIR_USR_BIN, BB_SUID_DROP, lspci))
 
 //kbuild:lib-$(CONFIG_LSPCI) += lspci.o
 
diff --git a/util-linux/lsusb.c b/util-linux/lsusb.c
index cabf047cf..33639413a 100644
--- a/util-linux/lsusb.c
+++ b/util-linux/lsusb.c
@@ -16,7 +16,7 @@
 //config:
 //config:	This version uses sysfs (/sys/bus/usb/devices) only.
 
-//applet:IF_LSUSB(APPLET(lsusb, BB_DIR_USR_BIN, BB_SUID_DROP))
+//applet:IF_LSUSB(APPLET_NOEXEC(lsusb, lsusb, BB_DIR_USR_BIN, BB_SUID_DROP, lsusb))
 
 //kbuild:lib-$(CONFIG_LSUSB) += lsusb.o