diff --git a/BUILD b/BUILD
index f43350875d..a63fc75a04 100644
--- a/BUILD
+++ b/BUILD
@@ -2,8 +2,17 @@ load("//tools:defs.bzl", "build_test", "gazelle", "go_path")
 load("//tools/nogo:defs.bzl", "nogo_config")
 load("//tools/yamltest:defs.bzl", "yaml_test")
 load("//website:defs.bzl", "doc")
+load("@rules_license//rules:license.bzl", "license")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
+
+license(
+    name = "license",
+    package_name = "gvisor",
+)
 
 exports_files(["LICENSE"])
 
diff --git a/WORKSPACE b/WORKSPACE
index 837cd0e8da..1461c05e21 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -26,6 +26,16 @@ load("@bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")
 
 bazel_skylib_workspace()
 
+# Load license rules.
+http_archive(
+    name = "rules_license",
+    urls = [
+        "https://github.com/bazelbuild/rules_license/releases/download/0.0.4/rules_license-0.0.4.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/rules_license/releases/download/0.0.4/rules_license-0.0.4.tar.gz",
+    ],
+    sha256 = "6157e1e68378532d0241ecd15d3c45f6e5cfd98fc10846045509fb2a7cc9e381",
+)
+
 # Load go bazel rules and gazelle.
 #
 # Note that this repository actually patches some other Go repositories as it
diff --git a/debian/BUILD b/debian/BUILD
index 3d58b5c625..8a08953e39 100644
--- a/debian/BUILD
+++ b/debian/BUILD
@@ -1,7 +1,10 @@
 load("//tools:arch.bzl", "select_arch")
 load("//tools:defs.bzl", "pkg_deb", "pkg_tar", "version")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 pkg_tar(
     name = "debian-bin",
diff --git a/examples/seccheck/BUILD b/examples/seccheck/BUILD
index 9fd1991336..557154522c 100644
--- a/examples/seccheck/BUILD
+++ b/examples/seccheck/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "cc_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 cc_binary(
     name = "server_cc",
diff --git a/g3doc/BUILD b/g3doc/BUILD
index f91a77b6f2..6f49459630 100644
--- a/g3doc/BUILD
+++ b/g3doc/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/architecture_guide/BUILD b/g3doc/architecture_guide/BUILD
index 404f627a4d..13cb35fd50 100644
--- a/g3doc/architecture_guide/BUILD
+++ b/g3doc/architecture_guide/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/proposals/BUILD b/g3doc/proposals/BUILD
index 7102831428..0b10d54c04 100644
--- a/g3doc/proposals/BUILD
+++ b/g3doc/proposals/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/user_guide/BUILD b/g3doc/user_guide/BUILD
index 373b0b7bea..8e17c7d5c1 100644
--- a/g3doc/user_guide/BUILD
+++ b/g3doc/user_guide/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/user_guide/containerd/BUILD b/g3doc/user_guide/containerd/BUILD
index 0ede4819c2..c821c64e1e 100644
--- a/g3doc/user_guide/containerd/BUILD
+++ b/g3doc/user_guide/containerd/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/user_guide/quick_start/BUILD b/g3doc/user_guide/quick_start/BUILD
index ee11d1acaa..396f184510 100644
--- a/g3doc/user_guide/quick_start/BUILD
+++ b/g3doc/user_guide/quick_start/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/g3doc/user_guide/tutorials/BUILD b/g3doc/user_guide/tutorials/BUILD
index b5cc15a4d0..f2a474d3a0 100644
--- a/g3doc/user_guide/tutorials/BUILD
+++ b/g3doc/user_guide/tutorials/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/images/BUILD b/images/BUILD
index 34b950644d..0374e2dd19 100644
--- a/images/BUILD
+++ b/images/BUILD
@@ -1 +1,4 @@
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
diff --git a/pkg/abi/BUILD b/pkg/abi/BUILD
index 839f822eb1..5b1f1f967a 100644
--- a/pkg/abi/BUILD
+++ b/pkg/abi/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "abi",
diff --git a/pkg/abi/attestation/BUILD b/pkg/abi/attestation/BUILD
index f5af70d607..3870a784e3 100644
--- a/pkg/abi/attestation/BUILD
+++ b/pkg/abi/attestation/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "attestation",
diff --git a/pkg/abi/linux/BUILD b/pkg/abi/linux/BUILD
index 7f0b132e50..d2dc482c7d 100644
--- a/pkg/abi/linux/BUILD
+++ b/pkg/abi/linux/BUILD
@@ -4,7 +4,10 @@ load("//tools:defs.bzl", "go_library", "go_test")
 # Linux kernel. It should be used instead of syscall or golang.org/x/sys/unix
 # when the host OS may not be Linux.
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "linux",
diff --git a/pkg/abi/linux/errno/BUILD b/pkg/abi/linux/errno/BUILD
index d003342d50..3e5ffb7431 100644
--- a/pkg/abi/linux/errno/BUILD
+++ b/pkg/abi/linux/errno/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "errno",
diff --git a/pkg/atomicbitops/BUILD b/pkg/atomicbitops/BUILD
index 10395afdc4..4533dbe329 100644
--- a/pkg/atomicbitops/BUILD
+++ b/pkg/atomicbitops/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "atomicbitops",
diff --git a/pkg/binary/BUILD b/pkg/binary/BUILD
index 7ca2fda90f..f1b03f0857 100644
--- a/pkg/binary/BUILD
+++ b/pkg/binary/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "binary",
diff --git a/pkg/bitmap/BUILD b/pkg/bitmap/BUILD
index 0f1e7006d1..04a734c2e5 100644
--- a/pkg/bitmap/BUILD
+++ b/pkg/bitmap/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "bitmap",
diff --git a/pkg/bits/BUILD b/pkg/bits/BUILD
index 63f4670d75..0a16ab9854 100644
--- a/pkg/bits/BUILD
+++ b/pkg/bits/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "bits",
diff --git a/pkg/bpf/BUILD b/pkg/bpf/BUILD
index c173905225..b1e9ff7763 100644
--- a/pkg/bpf/BUILD
+++ b/pkg/bpf/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "bpf",
diff --git a/pkg/bufferv2/BUILD b/pkg/bufferv2/BUILD
index fed6edbbd6..3d745e0080 100644
--- a/pkg/bufferv2/BUILD
+++ b/pkg/bufferv2/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "chunk_refs",
diff --git a/pkg/cleanup/BUILD b/pkg/cleanup/BUILD
index 5c34b98724..7be03953bc 100644
--- a/pkg/cleanup/BUILD
+++ b/pkg/cleanup/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cleanup",
diff --git a/pkg/compressio/BUILD b/pkg/compressio/BUILD
index 70018cf18a..e7f05b92c3 100644
--- a/pkg/compressio/BUILD
+++ b/pkg/compressio/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "compressio",
diff --git a/pkg/context/BUILD b/pkg/context/BUILD
index c370ed0d4c..e6f52309e5 100644
--- a/pkg/context/BUILD
+++ b/pkg/context/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "context",
diff --git a/pkg/control/client/BUILD b/pkg/control/client/BUILD
index 1b9e10ee71..48fdf2fbbe 100644
--- a/pkg/control/client/BUILD
+++ b/pkg/control/client/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "client",
diff --git a/pkg/control/server/BUILD b/pkg/control/server/BUILD
index 002d2ef441..9dacc65b3e 100644
--- a/pkg/control/server/BUILD
+++ b/pkg/control/server/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "server",
diff --git a/pkg/coretag/BUILD b/pkg/coretag/BUILD
index 8cd01796dc..d92d818b13 100644
--- a/pkg/coretag/BUILD
+++ b/pkg/coretag/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "coretag",
diff --git a/pkg/coverage/BUILD b/pkg/coverage/BUILD
index ace5895f82..f6c5ebe097 100644
--- a/pkg/coverage/BUILD
+++ b/pkg/coverage/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "coverage",
diff --git a/pkg/cpuid/BUILD b/pkg/cpuid/BUILD
index 535dd6df3c..eb67c54630 100644
--- a/pkg/cpuid/BUILD
+++ b/pkg/cpuid/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cpuid",
diff --git a/pkg/crypto/BUILD b/pkg/crypto/BUILD
index 08fa772cab..3d8769d570 100644
--- a/pkg/crypto/BUILD
+++ b/pkg/crypto/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "crypto",
diff --git a/pkg/errors/BUILD b/pkg/errors/BUILD
index 36ea5da0ca..dc4a987827 100644
--- a/pkg/errors/BUILD
+++ b/pkg/errors/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "errors",
diff --git a/pkg/errors/linuxerr/BUILD b/pkg/errors/linuxerr/BUILD
index 5b59ebd6ec..976f1b421c 100644
--- a/pkg/errors/linuxerr/BUILD
+++ b/pkg/errors/linuxerr/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "linuxerr",
diff --git a/pkg/eventchannel/BUILD b/pkg/eventchannel/BUILD
index 1f904a4326..42f9e44d7d 100644
--- a/pkg/eventchannel/BUILD
+++ b/pkg/eventchannel/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "eventchannel",
diff --git a/pkg/eventfd/BUILD b/pkg/eventfd/BUILD
index 2ff858d0a7..bb8cb18cef 100644
--- a/pkg/eventfd/BUILD
+++ b/pkg/eventfd/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "eventfd",
diff --git a/pkg/fd/BUILD b/pkg/fd/BUILD
index 59f102b974..25d249cca6 100644
--- a/pkg/fd/BUILD
+++ b/pkg/fd/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fd",
diff --git a/pkg/fdchannel/BUILD b/pkg/fdchannel/BUILD
index fe8f505bf9..ffbb3e1f89 100644
--- a/pkg/fdchannel/BUILD
+++ b/pkg/fdchannel/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/fdnotifier/BUILD b/pkg/fdnotifier/BUILD
index 235dcc490b..1f4c0d8f36 100644
--- a/pkg/fdnotifier/BUILD
+++ b/pkg/fdnotifier/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fdnotifier",
diff --git a/pkg/flipcall/BUILD b/pkg/flipcall/BUILD
index 520e1539dc..a76c1c6678 100644
--- a/pkg/flipcall/BUILD
+++ b/pkg/flipcall/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/fspath/BUILD b/pkg/fspath/BUILD
index 67dd1e2257..7cbe33442b 100644
--- a/pkg/fspath/BUILD
+++ b/pkg/fspath/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(default_visibility = ["//visibility:public"])
+package(
+    default_applicable_licenses = ["//:license"],
+    default_visibility = ["//visibility:public"],
+)
 
 licenses(["notice"])
 
diff --git a/pkg/fsutil/BUILD b/pkg/fsutil/BUILD
index ee85a1c58a..ac6af39755 100644
--- a/pkg/fsutil/BUILD
+++ b/pkg/fsutil/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/gohacks/BUILD b/pkg/gohacks/BUILD
index bb483fee5a..27bebc0d0a 100644
--- a/pkg/gohacks/BUILD
+++ b/pkg/gohacks/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "gohacks",
diff --git a/pkg/goid/BUILD b/pkg/goid/BUILD
index 08832a8ae4..3b961018a7 100644
--- a/pkg/goid/BUILD
+++ b/pkg/goid/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "goid",
diff --git a/pkg/hostarch/BUILD b/pkg/hostarch/BUILD
index 9c6be1cdd5..90952d585e 100644
--- a/pkg/hostarch/BUILD
+++ b/pkg/hostarch/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "addr_range",
diff --git a/pkg/hostos/BUILD b/pkg/hostos/BUILD
index c30ce3aa6c..776e2ed958 100644
--- a/pkg/hostos/BUILD
+++ b/pkg/hostos/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hostos",
diff --git a/pkg/hosttid/BUILD b/pkg/hosttid/BUILD
index fdbb731fe0..f662c518c6 100644
--- a/pkg/hosttid/BUILD
+++ b/pkg/hosttid/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hosttid",
diff --git a/pkg/ilist/BUILD b/pkg/ilist/BUILD
index 3f6eb07df1..3d7db3d8b5 100644
--- a/pkg/ilist/BUILD
+++ b/pkg/ilist/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ilist",
diff --git a/pkg/linewriter/BUILD b/pkg/linewriter/BUILD
index f84d037006..e81edcd6c4 100644
--- a/pkg/linewriter/BUILD
+++ b/pkg/linewriter/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "linewriter",
diff --git a/pkg/lisafs/BUILD b/pkg/lisafs/BUILD
index 01f5d4fafe..bc7faafb33 100644
--- a/pkg/lisafs/BUILD
+++ b/pkg/lisafs/BUILD
@@ -2,6 +2,7 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:public"],
     licenses = ["notice"],
 )
diff --git a/pkg/lisafs/testsuite/BUILD b/pkg/lisafs/testsuite/BUILD
index 4a522cde6d..00f10d2f4d 100644
--- a/pkg/lisafs/testsuite/BUILD
+++ b/pkg/lisafs/testsuite/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:public"],
     licenses = ["notice"],
 )
diff --git a/pkg/log/BUILD b/pkg/log/BUILD
index 7a48f92c73..bc68b7368d 100644
--- a/pkg/log/BUILD
+++ b/pkg/log/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "log",
diff --git a/pkg/marshal/BUILD b/pkg/marshal/BUILD
index 9ef4532836..e32b301b6e 100644
--- a/pkg/marshal/BUILD
+++ b/pkg/marshal/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/marshal/primitive/BUILD b/pkg/marshal/primitive/BUILD
index 6e5ce136d6..1194213e3a 100644
--- a/pkg/marshal/primitive/BUILD
+++ b/pkg/marshal/primitive/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/memutil/BUILD b/pkg/memutil/BUILD
index 50c6b8cadf..87ede4abc3 100644
--- a/pkg/memutil/BUILD
+++ b/pkg/memutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "memutil",
diff --git a/pkg/metric/BUILD b/pkg/metric/BUILD
index 00fd85a6da..04a69d913b 100644
--- a/pkg/metric/BUILD
+++ b/pkg/metric/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "metric",
diff --git a/pkg/metric/buckettool/BUILD b/pkg/metric/buckettool/BUILD
index b510168057..de42300451 100644
--- a/pkg/metric/buckettool/BUILD
+++ b/pkg/metric/buckettool/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "buckettool",
diff --git a/pkg/p9/BUILD b/pkg/p9/BUILD
index 9c30553774..41ba35de18 100644
--- a/pkg/p9/BUILD
+++ b/pkg/p9/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:public"],
     licenses = ["notice"],
 )
diff --git a/pkg/p9/p9test/BUILD b/pkg/p9/p9test/BUILD
index 7667bdd6ed..e9044af97e 100644
--- a/pkg/p9/p9test/BUILD
+++ b/pkg/p9/p9test/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 alias(
     name = "mockgen",
diff --git a/pkg/pool/BUILD b/pkg/pool/BUILD
index 7b1c6b75b2..e823749fb6 100644
--- a/pkg/pool/BUILD
+++ b/pkg/pool/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:public"],
     licenses = ["notice"],
 )
diff --git a/pkg/prometheus/BUILD b/pkg/prometheus/BUILD
index 95e7133ef6..ca74c5fc92 100644
--- a/pkg/prometheus/BUILD
+++ b/pkg/prometheus/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "prometheus",
diff --git a/pkg/rand/BUILD b/pkg/rand/BUILD
index 80b8ceb026..7389054ea1 100644
--- a/pkg/rand/BUILD
+++ b/pkg/rand/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "rand",
diff --git a/pkg/refs/BUILD b/pkg/refs/BUILD
index 7d356e37d1..e9b0425108 100644
--- a/pkg/refs/BUILD
+++ b/pkg/refs/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template(
     name = "refs_template",
diff --git a/pkg/ring0/BUILD b/pkg/ring0/BUILD
index 85dccaf770..50e4cb9f30 100644
--- a/pkg/ring0/BUILD
+++ b/pkg/ring0/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ring0",
diff --git a/pkg/ring0/pagetables/BUILD b/pkg/ring0/pagetables/BUILD
index f855f4d427..3e471e9085 100644
--- a/pkg/ring0/pagetables/BUILD
+++ b/pkg/ring0/pagetables/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 [
     # These files are tagged with relevant build architectures. We can always
diff --git a/pkg/safecopy/BUILD b/pkg/safecopy/BUILD
index 2a1602e2b7..a4cda0b434 100644
--- a/pkg/safecopy/BUILD
+++ b/pkg/safecopy/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "safecopy",
diff --git a/pkg/safemem/BUILD b/pkg/safemem/BUILD
index 2c7cc87698..b3f1a01224 100644
--- a/pkg/safemem/BUILD
+++ b/pkg/safemem/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "safemem",
diff --git a/pkg/seccomp/BUILD b/pkg/seccomp/BUILD
index 169fc0ac37..43bd995415 100644
--- a/pkg/seccomp/BUILD
+++ b/pkg/seccomp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary", "go_embed_data", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "victim",
diff --git a/pkg/secio/BUILD b/pkg/secio/BUILD
index 60f63c7a64..97fbdec902 100644
--- a/pkg/secio/BUILD
+++ b/pkg/secio/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "secio",
diff --git a/pkg/segment/BUILD b/pkg/segment/BUILD
index f57ccc1709..529f3d8a2f 100644
--- a/pkg/segment/BUILD
+++ b/pkg/segment/BUILD
@@ -1,6 +1,7 @@
 load("//tools/go_generics:defs.bzl", "go_template")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/pkg/segment/test/BUILD b/pkg/segment/test/BUILD
index 131bf09b9c..787d732b37 100644
--- a/pkg/segment/test/BUILD
+++ b/pkg/segment/test/BUILD
@@ -2,6 +2,7 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:private"],
     licenses = ["notice"],
 )
diff --git a/pkg/sentry/BUILD b/pkg/sentry/BUILD
index e759dc36f6..de3a6a5278 100644
--- a/pkg/sentry/BUILD
+++ b/pkg/sentry/BUILD
@@ -1,4 +1,7 @@
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 # The "internal" package_group should be used as much as possible by packages
 # that should remain Sentry-internal (i.e. not be exposed directly to command
diff --git a/pkg/sentry/arch/BUILD b/pkg/sentry/arch/BUILD
index e0dbc436d5..d98f4416a5 100644
--- a/pkg/sentry/arch/BUILD
+++ b/pkg/sentry/arch/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "arch",
diff --git a/pkg/sentry/arch/fpu/BUILD b/pkg/sentry/arch/fpu/BUILD
index 1f371e513b..daac61b000 100644
--- a/pkg/sentry/arch/fpu/BUILD
+++ b/pkg/sentry/arch/fpu/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fpu",
diff --git a/pkg/sentry/contexttest/BUILD b/pkg/sentry/contexttest/BUILD
index 74cfac6c91..a1dbf488ff 100644
--- a/pkg/sentry/contexttest/BUILD
+++ b/pkg/sentry/contexttest/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "contexttest",
diff --git a/pkg/sentry/control/BUILD b/pkg/sentry/control/BUILD
index 9a28b0b2e8..494bc3b6bf 100644
--- a/pkg/sentry/control/BUILD
+++ b/pkg/sentry/control/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 proto_library(
     name = "control",
diff --git a/pkg/sentry/device/BUILD b/pkg/sentry/device/BUILD
index 5ca338b52c..5be54af884 100644
--- a/pkg/sentry/device/BUILD
+++ b/pkg/sentry/device/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "device",
diff --git a/pkg/sentry/devices/memdev/BUILD b/pkg/sentry/devices/memdev/BUILD
index 0278cc18da..7893fdd253 100644
--- a/pkg/sentry/devices/memdev/BUILD
+++ b/pkg/sentry/devices/memdev/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/devices/ttydev/BUILD b/pkg/sentry/devices/ttydev/BUILD
index ab4cd0b336..b93b08b295 100644
--- a/pkg/sentry/devices/ttydev/BUILD
+++ b/pkg/sentry/devices/ttydev/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/devices/tundev/BUILD b/pkg/sentry/devices/tundev/BUILD
index dde02478e5..1014e7c9ae 100644
--- a/pkg/sentry/devices/tundev/BUILD
+++ b/pkg/sentry/devices/tundev/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fdimport/BUILD b/pkg/sentry/fdimport/BUILD
index cf310ac189..9b37f79ceb 100644
--- a/pkg/sentry/fdimport/BUILD
+++ b/pkg/sentry/fdimport/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fdimport",
diff --git a/pkg/sentry/fsimpl/cgroupfs/BUILD b/pkg/sentry/fsimpl/cgroupfs/BUILD
index 536dd26a11..fda2006baa 100644
--- a/pkg/sentry/fsimpl/cgroupfs/BUILD
+++ b/pkg/sentry/fsimpl/cgroupfs/BUILD
@@ -2,6 +2,8 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 declare_mutex(
diff --git a/pkg/sentry/fsimpl/devpts/BUILD b/pkg/sentry/fsimpl/devpts/BUILD
index 614c05ddb9..9b9e5d3441 100644
--- a/pkg/sentry/fsimpl/devpts/BUILD
+++ b/pkg/sentry/fsimpl/devpts/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/devtmpfs/BUILD b/pkg/sentry/fsimpl/devtmpfs/BUILD
index e49a04c1b7..8de87e60a5 100644
--- a/pkg/sentry/fsimpl/devtmpfs/BUILD
+++ b/pkg/sentry/fsimpl/devtmpfs/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/eventfd/BUILD b/pkg/sentry/fsimpl/eventfd/BUILD
index 1cb049a29b..6a0dad2b22 100644
--- a/pkg/sentry/fsimpl/eventfd/BUILD
+++ b/pkg/sentry/fsimpl/eventfd/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/ext/BUILD b/pkg/sentry/fsimpl/ext/BUILD
index e69de29bb2..e8fc44ae52 100644
--- a/pkg/sentry/fsimpl/ext/BUILD
+++ b/pkg/sentry/fsimpl/ext/BUILD
@@ -0,0 +1 @@
+package(default_applicable_licenses = ["//:license"])
diff --git a/pkg/sentry/fsimpl/fuse/BUILD b/pkg/sentry/fsimpl/fuse/BUILD
index 48d71dbe4f..f460d5ca4c 100644
--- a/pkg/sentry/fsimpl/fuse/BUILD
+++ b/pkg/sentry/fsimpl/fuse/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/gofer/BUILD b/pkg/sentry/fsimpl/gofer/BUILD
index d3df59a973..8b48bdb130 100644
--- a/pkg/sentry/fsimpl/gofer/BUILD
+++ b/pkg/sentry/fsimpl/gofer/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/host/BUILD b/pkg/sentry/fsimpl/host/BUILD
index 3cc00621bf..460c15adb6 100644
--- a/pkg/sentry/fsimpl/host/BUILD
+++ b/pkg/sentry/fsimpl/host/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/iouringfs/BUILD b/pkg/sentry/fsimpl/iouringfs/BUILD
index 8e5eec31d6..7addee6b33 100644
--- a/pkg/sentry/fsimpl/iouringfs/BUILD
+++ b/pkg/sentry/fsimpl/iouringfs/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/kernfs/BUILD b/pkg/sentry/fsimpl/kernfs/BUILD
index 322b3e4c80..94c11c7557 100644
--- a/pkg/sentry/fsimpl/kernfs/BUILD
+++ b/pkg/sentry/fsimpl/kernfs/BUILD
@@ -2,6 +2,8 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/lock/BUILD b/pkg/sentry/fsimpl/lock/BUILD
index 47f8d98247..a6a78eb485 100644
--- a/pkg/sentry/fsimpl/lock/BUILD
+++ b/pkg/sentry/fsimpl/lock/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "lock_range",
diff --git a/pkg/sentry/fsimpl/mqfs/BUILD b/pkg/sentry/fsimpl/mqfs/BUILD
index 575315e180..5efeeaf8c9 100644
--- a/pkg/sentry/fsimpl/mqfs/BUILD
+++ b/pkg/sentry/fsimpl/mqfs/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "root_inode_refs",
diff --git a/pkg/sentry/fsimpl/overlay/BUILD b/pkg/sentry/fsimpl/overlay/BUILD
index e5daab1589..b847df89c8 100644
--- a/pkg/sentry/fsimpl/overlay/BUILD
+++ b/pkg/sentry/fsimpl/overlay/BUILD
@@ -2,6 +2,8 @@ load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 declare_mutex(
diff --git a/pkg/sentry/fsimpl/pipefs/BUILD b/pkg/sentry/fsimpl/pipefs/BUILD
index a50510031a..04aeaacd87 100644
--- a/pkg/sentry/fsimpl/pipefs/BUILD
+++ b/pkg/sentry/fsimpl/pipefs/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/proc/BUILD b/pkg/sentry/fsimpl/proc/BUILD
index 8124581c5b..d966dacac6 100644
--- a/pkg/sentry/fsimpl/proc/BUILD
+++ b/pkg/sentry/fsimpl/proc/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/signalfd/BUILD b/pkg/sentry/fsimpl/signalfd/BUILD
index 403c6f254d..57c879054a 100644
--- a/pkg/sentry/fsimpl/signalfd/BUILD
+++ b/pkg/sentry/fsimpl/signalfd/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "signalfd",
diff --git a/pkg/sentry/fsimpl/sockfs/BUILD b/pkg/sentry/fsimpl/sockfs/BUILD
index 9defca9360..81a68a5829 100644
--- a/pkg/sentry/fsimpl/sockfs/BUILD
+++ b/pkg/sentry/fsimpl/sockfs/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/sys/BUILD b/pkg/sentry/fsimpl/sys/BUILD
index e03cb015b2..2419fe325c 100644
--- a/pkg/sentry/fsimpl/sys/BUILD
+++ b/pkg/sentry/fsimpl/sys/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/testutil/BUILD b/pkg/sentry/fsimpl/testutil/BUILD
index 5ce97ac4a7..61423ad92d 100644
--- a/pkg/sentry/fsimpl/testutil/BUILD
+++ b/pkg/sentry/fsimpl/testutil/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/timerfd/BUILD b/pkg/sentry/fsimpl/timerfd/BUILD
index 8bd95074a1..60a2b43eb2 100644
--- a/pkg/sentry/fsimpl/timerfd/BUILD
+++ b/pkg/sentry/fsimpl/timerfd/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsimpl/tmpfs/BUILD b/pkg/sentry/fsimpl/tmpfs/BUILD
index aa659e9c25..ad768b9d42 100644
--- a/pkg/sentry/fsimpl/tmpfs/BUILD
+++ b/pkg/sentry/fsimpl/tmpfs/BUILD
@@ -2,6 +2,8 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/fsimpl/user/BUILD b/pkg/sentry/fsimpl/user/BUILD
index f446f183cf..42dcd889a7 100644
--- a/pkg/sentry/fsimpl/user/BUILD
+++ b/pkg/sentry/fsimpl/user/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "user",
diff --git a/pkg/sentry/fsmetric/BUILD b/pkg/sentry/fsmetric/BUILD
index 4e86fbdd85..36175c0e44 100644
--- a/pkg/sentry/fsmetric/BUILD
+++ b/pkg/sentry/fsmetric/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/fsutil/BUILD b/pkg/sentry/fsutil/BUILD
index 62c37ec3e5..4a3b1624f2 100644
--- a/pkg/sentry/fsutil/BUILD
+++ b/pkg/sentry/fsutil/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "dirty_set_impl",
diff --git a/pkg/sentry/hostcpu/BUILD b/pkg/sentry/hostcpu/BUILD
index e6933aa70d..c3cb72bd2d 100644
--- a/pkg/sentry/hostcpu/BUILD
+++ b/pkg/sentry/hostcpu/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hostcpu",
diff --git a/pkg/sentry/hostfd/BUILD b/pkg/sentry/hostfd/BUILD
index db3b0d0a08..575b7ff2da 100644
--- a/pkg/sentry/hostfd/BUILD
+++ b/pkg/sentry/hostfd/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/sentry/hostmm/BUILD b/pkg/sentry/hostmm/BUILD
index 03c8e2f385..7ce252fea1 100644
--- a/pkg/sentry/hostmm/BUILD
+++ b/pkg/sentry/hostmm/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hostmm",
diff --git a/pkg/sentry/inet/BUILD b/pkg/sentry/inet/BUILD
index 6f6c3fbed4..089b18db8c 100644
--- a/pkg/sentry/inet/BUILD
+++ b/pkg/sentry/inet/BUILD
@@ -2,6 +2,7 @@ load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/pkg/sentry/kernel/BUILD b/pkg/sentry/kernel/BUILD
index 13172abaf5..e78262e668 100644
--- a/pkg/sentry/kernel/BUILD
+++ b/pkg/sentry/kernel/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_mutex(
     name = "cpu_clock_mutex",
diff --git a/pkg/sentry/kernel/auth/BUILD b/pkg/sentry/kernel/auth/BUILD
index e8a3204b32..28f75d703e 100644
--- a/pkg/sentry/kernel/auth/BUILD
+++ b/pkg/sentry/kernel/auth/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "atomicptr_credentials",
diff --git a/pkg/sentry/kernel/contexttest/BUILD b/pkg/sentry/kernel/contexttest/BUILD
index 9d26392c01..7af229a1e2 100644
--- a/pkg/sentry/kernel/contexttest/BUILD
+++ b/pkg/sentry/kernel/contexttest/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "contexttest",
diff --git a/pkg/sentry/kernel/fasync/BUILD b/pkg/sentry/kernel/fasync/BUILD
index 5c0a86c2e6..e4517b2daf 100644
--- a/pkg/sentry/kernel/fasync/BUILD
+++ b/pkg/sentry/kernel/fasync/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fasync",
diff --git a/pkg/sentry/kernel/futex/BUILD b/pkg/sentry/kernel/futex/BUILD
index a0dd3e3efb..0def00f46b 100644
--- a/pkg/sentry/kernel/futex/BUILD
+++ b/pkg/sentry/kernel/futex/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_mutex(
     name = "futex_mutex",
diff --git a/pkg/sentry/kernel/ipc/BUILD b/pkg/sentry/kernel/ipc/BUILD
index b1f760e40f..c8b067b6ef 100644
--- a/pkg/sentry/kernel/ipc/BUILD
+++ b/pkg/sentry/kernel/ipc/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ipc",
diff --git a/pkg/sentry/kernel/memevent/BUILD b/pkg/sentry/kernel/memevent/BUILD
index 4486848d20..e273162a58 100644
--- a/pkg/sentry/kernel/memevent/BUILD
+++ b/pkg/sentry/kernel/memevent/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "memevent",
diff --git a/pkg/sentry/kernel/mq/BUILD b/pkg/sentry/kernel/mq/BUILD
index b2aceeb561..42655a45d8 100644
--- a/pkg/sentry/kernel/mq/BUILD
+++ b/pkg/sentry/kernel/mq/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "message_list",
diff --git a/pkg/sentry/kernel/msgqueue/BUILD b/pkg/sentry/kernel/msgqueue/BUILD
index 7751d197d6..a4a8ffeee8 100644
--- a/pkg/sentry/kernel/msgqueue/BUILD
+++ b/pkg/sentry/kernel/msgqueue/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "message_list",
diff --git a/pkg/sentry/kernel/pipe/BUILD b/pkg/sentry/kernel/pipe/BUILD
index 7279414f29..bd135fc637 100644
--- a/pkg/sentry/kernel/pipe/BUILD
+++ b/pkg/sentry/kernel/pipe/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_mutex(
     name = "vfs_mutex",
diff --git a/pkg/sentry/kernel/sched/BUILD b/pkg/sentry/kernel/sched/BUILD
index 1b82e087b4..3b2df4e4c5 100644
--- a/pkg/sentry/kernel/sched/BUILD
+++ b/pkg/sentry/kernel/sched/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sched",
diff --git a/pkg/sentry/kernel/semaphore/BUILD b/pkg/sentry/kernel/semaphore/BUILD
index 063acca355..b8215869bd 100644
--- a/pkg/sentry/kernel/semaphore/BUILD
+++ b/pkg/sentry/kernel/semaphore/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "waiter_list",
diff --git a/pkg/sentry/kernel/shm/BUILD b/pkg/sentry/kernel/shm/BUILD
index b76177d9fc..421d1a9a67 100644
--- a/pkg/sentry/kernel/shm/BUILD
+++ b/pkg/sentry/kernel/shm/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "shm_refs",
diff --git a/pkg/sentry/kernel/time/BUILD b/pkg/sentry/kernel/time/BUILD
index 59fbcd9d61..4a9fa0c4bf 100644
--- a/pkg/sentry/kernel/time/BUILD
+++ b/pkg/sentry/kernel/time/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "time",
diff --git a/pkg/sentry/limits/BUILD b/pkg/sentry/limits/BUILD
index 21b0d15953..6c09f7d0ae 100644
--- a/pkg/sentry/limits/BUILD
+++ b/pkg/sentry/limits/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "limits",
diff --git a/pkg/sentry/loader/BUILD b/pkg/sentry/loader/BUILD
index 863ab2c4ce..d63030166c 100644
--- a/pkg/sentry/loader/BUILD
+++ b/pkg/sentry/loader/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "loader",
diff --git a/pkg/sentry/loader/vdsodata/BUILD b/pkg/sentry/loader/vdsodata/BUILD
index 809c497cfa..eb2344d9b5 100644
--- a/pkg/sentry/loader/vdsodata/BUILD
+++ b/pkg/sentry/loader/vdsodata/BUILD
@@ -1,7 +1,10 @@
 load("//tools:arch.bzl", "arch_genrule")
 load("//tools:defs.bzl", "go_embed_data", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_embed_data(
     name = "vdso_bin",
diff --git a/pkg/sentry/memmap/BUILD b/pkg/sentry/memmap/BUILD
index a89bfa6805..66c9a4731f 100644
--- a/pkg/sentry/memmap/BUILD
+++ b/pkg/sentry/memmap/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "mappable_range",
diff --git a/pkg/sentry/mm/BUILD b/pkg/sentry/mm/BUILD
index 832ca5f3d5..40bb3d439d 100644
--- a/pkg/sentry/mm/BUILD
+++ b/pkg/sentry/mm/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_mutex(
     name = "aio_context_mutex",
diff --git a/pkg/sentry/pgalloc/BUILD b/pkg/sentry/pgalloc/BUILD
index faca66d6ec..090f0e143c 100644
--- a/pkg/sentry/pgalloc/BUILD
+++ b/pkg/sentry/pgalloc/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "evictable_range",
diff --git a/pkg/sentry/platform/BUILD b/pkg/sentry/platform/BUILD
index 7adee4692e..fd88e8911e 100644
--- a/pkg/sentry/platform/BUILD
+++ b/pkg/sentry/platform/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "platform",
diff --git a/pkg/sentry/platform/interrupt/BUILD b/pkg/sentry/platform/interrupt/BUILD
index 83b385f145..3ccb0c4d31 100644
--- a/pkg/sentry/platform/interrupt/BUILD
+++ b/pkg/sentry/platform/interrupt/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "interrupt",
diff --git a/pkg/sentry/platform/kvm/BUILD b/pkg/sentry/platform/kvm/BUILD
index 0e96465cf0..c0b3e8b872 100644
--- a/pkg/sentry/platform/kvm/BUILD
+++ b/pkg/sentry/platform/kvm/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "atomicptr_machine",
diff --git a/pkg/sentry/platform/kvm/testutil/BUILD b/pkg/sentry/platform/kvm/testutil/BUILD
index f7feb86831..7f2c0597b2 100644
--- a/pkg/sentry/platform/kvm/testutil/BUILD
+++ b/pkg/sentry/platform/kvm/testutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "testutil",
diff --git a/pkg/sentry/platform/ptrace/BUILD b/pkg/sentry/platform/ptrace/BUILD
index 27b2025935..d973623d5e 100644
--- a/pkg/sentry/platform/ptrace/BUILD
+++ b/pkg/sentry/platform/ptrace/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ptrace",
diff --git a/pkg/sentry/platform/systrap/BUILD b/pkg/sentry/platform/systrap/BUILD
index 8eee1b304a..de0d70921c 100644
--- a/pkg/sentry/platform/systrap/BUILD
+++ b/pkg/sentry/platform/systrap/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "subprocess_list",
diff --git a/pkg/sentry/platform/systrap/sysmsg/BUILD b/pkg/sentry/platform/systrap/sysmsg/BUILD
index 569459762d..633f8da6bd 100644
--- a/pkg/sentry/platform/systrap/sysmsg/BUILD
+++ b/pkg/sentry/platform/systrap/sysmsg/BUILD
@@ -2,7 +2,10 @@ load("//tools:arch.bzl", "arch_genrule", "select_arch")
 load("//tools:defs.bzl", "cc_flags_supplier", "cc_toolchain", "go_library")
 load("build.bzl", "cc_pie_obj")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 cc_flags_supplier(
     name = "no_pie_cc_flags",
diff --git a/pkg/sentry/platform/systrap/usertrap/BUILD b/pkg/sentry/platform/systrap/usertrap/BUILD
index 731bef64e8..c0bb56647b 100644
--- a/pkg/sentry/platform/systrap/usertrap/BUILD
+++ b/pkg/sentry/platform/systrap/usertrap/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "usertrap",
diff --git a/pkg/sentry/seccheck/BUILD b/pkg/sentry/seccheck/BUILD
index 338edf8946..8c66bf19c1 100644
--- a/pkg/sentry/seccheck/BUILD
+++ b/pkg/sentry/seccheck/BUILD
@@ -1,6 +1,8 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_template_instance(
diff --git a/pkg/sentry/seccheck/points/BUILD b/pkg/sentry/seccheck/points/BUILD
index b2eb8aa7c9..ee752063c9 100644
--- a/pkg/sentry/seccheck/points/BUILD
+++ b/pkg/sentry/seccheck/points/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "proto_library")
 
 licenses(["notice"])
 
-package(default_visibility = ["//:sandbox"])
+package(
+    default_applicable_licenses = ["//:license"],
+    default_visibility = ["//:sandbox"],
+)
 
 proto_library(
     name = "points",
diff --git a/pkg/sentry/seccheck/sinks/null/BUILD b/pkg/sentry/seccheck/sinks/null/BUILD
index 1136dc5bce..87f8ea0847 100644
--- a/pkg/sentry/seccheck/sinks/null/BUILD
+++ b/pkg/sentry/seccheck/sinks/null/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "null",
diff --git a/pkg/sentry/seccheck/sinks/remote/BUILD b/pkg/sentry/seccheck/sinks/remote/BUILD
index b33553ce58..c09710e1fc 100644
--- a/pkg/sentry/seccheck/sinks/remote/BUILD
+++ b/pkg/sentry/seccheck/sinks/remote/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "remote",
diff --git a/pkg/sentry/seccheck/sinks/remote/server/BUILD b/pkg/sentry/seccheck/sinks/remote/server/BUILD
index ae3471baea..dcc801f124 100644
--- a/pkg/sentry/seccheck/sinks/remote/server/BUILD
+++ b/pkg/sentry/seccheck/sinks/remote/server/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "server",
diff --git a/pkg/sentry/seccheck/sinks/remote/test/BUILD b/pkg/sentry/seccheck/sinks/remote/test/BUILD
index 6c3c1596a2..e5ee678fa2 100644
--- a/pkg/sentry/seccheck/sinks/remote/test/BUILD
+++ b/pkg/sentry/seccheck/sinks/remote/test/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "test",
diff --git a/pkg/sentry/seccheck/sinks/remote/wire/BUILD b/pkg/sentry/seccheck/sinks/remote/wire/BUILD
index b0c1ad5d55..4a29c876e1 100644
--- a/pkg/sentry/seccheck/sinks/remote/wire/BUILD
+++ b/pkg/sentry/seccheck/sinks/remote/wire/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "wire",
diff --git a/pkg/sentry/socket/BUILD b/pkg/sentry/socket/BUILD
index a617323584..e427d2e21e 100644
--- a/pkg/sentry/socket/BUILD
+++ b/pkg/sentry/socket/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "socket",
diff --git a/pkg/sentry/socket/control/BUILD b/pkg/sentry/socket/control/BUILD
index 59cf5521d9..04497cbecb 100644
--- a/pkg/sentry/socket/control/BUILD
+++ b/pkg/sentry/socket/control/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "control",
diff --git a/pkg/sentry/socket/hostinet/BUILD b/pkg/sentry/socket/hostinet/BUILD
index 6f9a34c0b1..4671bd94f6 100644
--- a/pkg/sentry/socket/hostinet/BUILD
+++ b/pkg/sentry/socket/hostinet/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hostinet",
diff --git a/pkg/sentry/socket/netfilter/BUILD b/pkg/sentry/socket/netfilter/BUILD
index 608474fa19..09bb4de187 100644
--- a/pkg/sentry/socket/netfilter/BUILD
+++ b/pkg/sentry/socket/netfilter/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "netfilter",
diff --git a/pkg/sentry/socket/netlink/BUILD b/pkg/sentry/socket/netlink/BUILD
index 130715ad79..09d0328e84 100644
--- a/pkg/sentry/socket/netlink/BUILD
+++ b/pkg/sentry/socket/netlink/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "netlink",
diff --git a/pkg/sentry/socket/netlink/port/BUILD b/pkg/sentry/socket/netlink/port/BUILD
index 3a22923d81..802c16dd89 100644
--- a/pkg/sentry/socket/netlink/port/BUILD
+++ b/pkg/sentry/socket/netlink/port/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "port",
diff --git a/pkg/sentry/socket/netlink/route/BUILD b/pkg/sentry/socket/netlink/route/BUILD
index c6c04b4e35..1e5eb9fd42 100644
--- a/pkg/sentry/socket/netlink/route/BUILD
+++ b/pkg/sentry/socket/netlink/route/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "route",
diff --git a/pkg/sentry/socket/netlink/uevent/BUILD b/pkg/sentry/socket/netlink/uevent/BUILD
index b6434923cf..eed8f8a28b 100644
--- a/pkg/sentry/socket/netlink/uevent/BUILD
+++ b/pkg/sentry/socket/netlink/uevent/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "uevent",
diff --git a/pkg/sentry/socket/netstack/BUILD b/pkg/sentry/socket/netstack/BUILD
index b5a0363548..6ab53d67e7 100644
--- a/pkg/sentry/socket/netstack/BUILD
+++ b/pkg/sentry/socket/netstack/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "netstack",
diff --git a/pkg/sentry/socket/unix/BUILD b/pkg/sentry/socket/unix/BUILD
index cf0534b48b..c0472714e5 100644
--- a/pkg/sentry/socket/unix/BUILD
+++ b/pkg/sentry/socket/unix/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "socket_refs",
diff --git a/pkg/sentry/socket/unix/transport/BUILD b/pkg/sentry/socket/unix/transport/BUILD
index 5110d5581b..991fa70fa6 100644
--- a/pkg/sentry/socket/unix/transport/BUILD
+++ b/pkg/sentry/socket/unix/transport/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_mutex(
     name = "queue_mutex",
diff --git a/pkg/sentry/state/BUILD b/pkg/sentry/state/BUILD
index 7f02807c56..21db8c49da 100644
--- a/pkg/sentry/state/BUILD
+++ b/pkg/sentry/state/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "state",
diff --git a/pkg/sentry/strace/BUILD b/pkg/sentry/strace/BUILD
index 64cf65ed60..45a8718e42 100644
--- a/pkg/sentry/strace/BUILD
+++ b/pkg/sentry/strace/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "strace",
diff --git a/pkg/sentry/syscalls/BUILD b/pkg/sentry/syscalls/BUILD
index 971e075a67..a812176770 100644
--- a/pkg/sentry/syscalls/BUILD
+++ b/pkg/sentry/syscalls/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "syscalls",
diff --git a/pkg/sentry/syscalls/linux/BUILD b/pkg/sentry/syscalls/linux/BUILD
index 5c4c7e3a23..d8bcb685f4 100644
--- a/pkg/sentry/syscalls/linux/BUILD
+++ b/pkg/sentry/syscalls/linux/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "linux",
diff --git a/pkg/sentry/time/BUILD b/pkg/sentry/time/BUILD
index 84cbcf7ce1..4b147b829c 100644
--- a/pkg/sentry/time/BUILD
+++ b/pkg/sentry/time/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "seqatomic_parameters",
diff --git a/pkg/sentry/unimpl/BUILD b/pkg/sentry/unimpl/BUILD
index 5d4aa3a637..5abc2a0a7f 100644
--- a/pkg/sentry/unimpl/BUILD
+++ b/pkg/sentry/unimpl/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 proto_library(
     name = "unimplemented_syscall",
diff --git a/pkg/sentry/uniqueid/BUILD b/pkg/sentry/uniqueid/BUILD
index 04e2021d5d..5985f9658e 100644
--- a/pkg/sentry/uniqueid/BUILD
+++ b/pkg/sentry/uniqueid/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "uniqueid",
diff --git a/pkg/sentry/usage/BUILD b/pkg/sentry/usage/BUILD
index 83a81f2435..5fac80c28d 100644
--- a/pkg/sentry/usage/BUILD
+++ b/pkg/sentry/usage/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "usage",
diff --git a/pkg/sentry/vfs/BUILD b/pkg/sentry/vfs/BUILD
index 4aa86996ad..95a1e71f85 100644
--- a/pkg/sentry/vfs/BUILD
+++ b/pkg/sentry/vfs/BUILD
@@ -2,6 +2,8 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 declare_mutex(
diff --git a/pkg/sentry/vfs/genericfstree/BUILD b/pkg/sentry/vfs/genericfstree/BUILD
index d8fd926773..5a8e55cc1d 100644
--- a/pkg/sentry/vfs/genericfstree/BUILD
+++ b/pkg/sentry/vfs/genericfstree/BUILD
@@ -1,6 +1,7 @@
 load("//tools/go_generics:defs.bzl", "go_template")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/pkg/sentry/vfs/memxattr/BUILD b/pkg/sentry/vfs/memxattr/BUILD
index 444ab42b9e..0fe172eec3 100644
--- a/pkg/sentry/vfs/memxattr/BUILD
+++ b/pkg/sentry/vfs/memxattr/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "memxattr",
diff --git a/pkg/sentry/watchdog/BUILD b/pkg/sentry/watchdog/BUILD
index 1c5a1c9b61..bbc3694612 100644
--- a/pkg/sentry/watchdog/BUILD
+++ b/pkg/sentry/watchdog/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "watchdog",
diff --git a/pkg/shim/BUILD b/pkg/shim/BUILD
index 9b25e74bf4..2e0ee5c3ac 100644
--- a/pkg/shim/BUILD
+++ b/pkg/shim/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "shim",
diff --git a/pkg/shim/proc/BUILD b/pkg/shim/proc/BUILD
index 653596ea52..57a67d321a 100644
--- a/pkg/shim/proc/BUILD
+++ b/pkg/shim/proc/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "proc",
diff --git a/pkg/shim/runsc/BUILD b/pkg/shim/runsc/BUILD
index f2fc813e69..71d624219c 100644
--- a/pkg/shim/runsc/BUILD
+++ b/pkg/shim/runsc/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "runsc",
diff --git a/pkg/shim/runtimeoptions/BUILD b/pkg/shim/runtimeoptions/BUILD
index 029be7c093..156c1321e4 100644
--- a/pkg/shim/runtimeoptions/BUILD
+++ b/pkg/shim/runtimeoptions/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 proto_library(
     name = "api",
diff --git a/pkg/shim/runtimeoptions/v14/BUILD b/pkg/shim/runtimeoptions/v14/BUILD
index e25716ecae..0ed2dc3d94 100644
--- a/pkg/shim/runtimeoptions/v14/BUILD
+++ b/pkg/shim/runtimeoptions/v14/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "proto_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 proto_library(
     name = "api",
diff --git a/pkg/shim/utils/BUILD b/pkg/shim/utils/BUILD
index cc98b1e02d..85608afde9 100644
--- a/pkg/shim/utils/BUILD
+++ b/pkg/shim/utils/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "utils",
diff --git a/pkg/sighandling/BUILD b/pkg/sighandling/BUILD
index b0a6c8a9e1..85e8556e41 100644
--- a/pkg/sighandling/BUILD
+++ b/pkg/sighandling/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sighandling",
diff --git a/pkg/sleep/BUILD b/pkg/sleep/BUILD
index 21df8994a1..018f5a5325 100644
--- a/pkg/sleep/BUILD
+++ b/pkg/sleep/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sleep",
diff --git a/pkg/state/BUILD b/pkg/state/BUILD
index b16a24cdc3..d177ef9436 100644
--- a/pkg/state/BUILD
+++ b/pkg/state/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "deferred_list",
diff --git a/pkg/state/pretty/BUILD b/pkg/state/pretty/BUILD
index d053802f75..6fe7924400 100644
--- a/pkg/state/pretty/BUILD
+++ b/pkg/state/pretty/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "pretty",
diff --git a/pkg/state/statefile/BUILD b/pkg/state/statefile/BUILD
index 08d06e37ba..5faa914028 100644
--- a/pkg/state/statefile/BUILD
+++ b/pkg/state/statefile/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "statefile",
diff --git a/pkg/state/tests/BUILD b/pkg/state/tests/BUILD
index 9297cafbe7..183f4b035d 100644
--- a/pkg/state/tests/BUILD
+++ b/pkg/state/tests/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "tests",
diff --git a/pkg/state/wire/BUILD b/pkg/state/wire/BUILD
index 311b93dcbc..4aa78cb81f 100644
--- a/pkg/state/wire/BUILD
+++ b/pkg/state/wire/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "wire",
diff --git a/pkg/sync/BUILD b/pkg/sync/BUILD
index f35dfa254a..c6d01d2206 100644
--- a/pkg/sync/BUILD
+++ b/pkg/sync/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/pkg/sync/atomicptr/BUILD b/pkg/sync/atomicptr/BUILD
index a6a7f01acd..c6e5d7fedb 100644
--- a/pkg/sync/atomicptr/BUILD
+++ b/pkg/sync/atomicptr/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template(
     name = "generic_atomicptr",
diff --git a/pkg/sync/atomicptrmap/BUILD b/pkg/sync/atomicptrmap/BUILD
index 1c0085d695..77196a4194 100644
--- a/pkg/sync/atomicptrmap/BUILD
+++ b/pkg/sync/atomicptrmap/BUILD
@@ -2,6 +2,7 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//visibility:private"],
     licenses = ["notice"],
 )
diff --git a/pkg/sync/locking/BUILD b/pkg/sync/locking/BUILD
index 9ce256024c..a71f03981e 100644
--- a/pkg/sync/locking/BUILD
+++ b/pkg/sync/locking/BUILD
@@ -3,6 +3,7 @@ load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/pkg/sync/seqatomic/BUILD b/pkg/sync/seqatomic/BUILD
index 60f79ab548..46e139ef2a 100644
--- a/pkg/sync/seqatomic/BUILD
+++ b/pkg/sync/seqatomic/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template(
     name = "generic_seqatomic",
diff --git a/pkg/syncevent/BUILD b/pkg/syncevent/BUILD
index a661baef7b..f279b554ee 100644
--- a/pkg/syncevent/BUILD
+++ b/pkg/syncevent/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/pkg/syserr/BUILD b/pkg/syserr/BUILD
index 56c778a972..1f89f3e278 100644
--- a/pkg/syserr/BUILD
+++ b/pkg/syserr/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "syserr",
diff --git a/pkg/tcpip/BUILD b/pkg/tcpip/BUILD
index a47d49876a..501d98c8c1 100644
--- a/pkg/tcpip/BUILD
+++ b/pkg/tcpip/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools:deps.bzl", "deps_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "sock_err_list",
diff --git a/pkg/tcpip/adapters/gonet/BUILD b/pkg/tcpip/adapters/gonet/BUILD
index 317aefeec1..65b3ef24d7 100644
--- a/pkg/tcpip/adapters/gonet/BUILD
+++ b/pkg/tcpip/adapters/gonet/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "gonet",
diff --git a/pkg/tcpip/checker/BUILD b/pkg/tcpip/checker/BUILD
index 07ec245fad..de387c5e82 100644
--- a/pkg/tcpip/checker/BUILD
+++ b/pkg/tcpip/checker/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checker",
diff --git a/pkg/tcpip/checksum/BUILD b/pkg/tcpip/checksum/BUILD
index 1572d60a43..26dd9a5cc8 100644
--- a/pkg/tcpip/checksum/BUILD
+++ b/pkg/tcpip/checksum/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "checksum_test",
diff --git a/pkg/tcpip/faketime/BUILD b/pkg/tcpip/faketime/BUILD
index bb9d44aff6..c1ea365624 100644
--- a/pkg/tcpip/faketime/BUILD
+++ b/pkg/tcpip/faketime/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "faketime",
diff --git a/pkg/tcpip/hash/jenkins/BUILD b/pkg/tcpip/hash/jenkins/BUILD
index ff27192916..ae74ccace5 100644
--- a/pkg/tcpip/hash/jenkins/BUILD
+++ b/pkg/tcpip/hash/jenkins/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "jenkins",
diff --git a/pkg/tcpip/header/BUILD b/pkg/tcpip/header/BUILD
index 8119f6ee61..49723f59a2 100644
--- a/pkg/tcpip/header/BUILD
+++ b/pkg/tcpip/header/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "header",
diff --git a/pkg/tcpip/header/parse/BUILD b/pkg/tcpip/header/parse/BUILD
index 279307716b..823127a64d 100644
--- a/pkg/tcpip/header/parse/BUILD
+++ b/pkg/tcpip/header/parse/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "parse",
diff --git a/pkg/tcpip/internal/tcp/BUILD b/pkg/tcpip/internal/tcp/BUILD
index 9ae258a0b3..830bc9aeec 100644
--- a/pkg/tcpip/internal/tcp/BUILD
+++ b/pkg/tcpip/internal/tcp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "tcp",
diff --git a/pkg/tcpip/link/channel/BUILD b/pkg/tcpip/link/channel/BUILD
index 973f06cbc3..63e30e0ef3 100644
--- a/pkg/tcpip/link/channel/BUILD
+++ b/pkg/tcpip/link/channel/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "channel",
diff --git a/pkg/tcpip/link/ethernet/BUILD b/pkg/tcpip/link/ethernet/BUILD
index 26a9bd04ad..9cdb92f6d0 100644
--- a/pkg/tcpip/link/ethernet/BUILD
+++ b/pkg/tcpip/link/ethernet/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ethernet",
diff --git a/pkg/tcpip/link/fdbased/BUILD b/pkg/tcpip/link/fdbased/BUILD
index a3be48982e..48909bd5d8 100644
--- a/pkg/tcpip/link/fdbased/BUILD
+++ b/pkg/tcpip/link/fdbased/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fdbased",
diff --git a/pkg/tcpip/link/loopback/BUILD b/pkg/tcpip/link/loopback/BUILD
index db3e6359c9..7e066cf101 100644
--- a/pkg/tcpip/link/loopback/BUILD
+++ b/pkg/tcpip/link/loopback/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "loopback",
diff --git a/pkg/tcpip/link/muxed/BUILD b/pkg/tcpip/link/muxed/BUILD
index 55545db464..11a40b77e2 100644
--- a/pkg/tcpip/link/muxed/BUILD
+++ b/pkg/tcpip/link/muxed/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "muxed",
diff --git a/pkg/tcpip/link/nested/BUILD b/pkg/tcpip/link/nested/BUILD
index d383dae6f8..d46cd2e9c9 100644
--- a/pkg/tcpip/link/nested/BUILD
+++ b/pkg/tcpip/link/nested/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "nested",
diff --git a/pkg/tcpip/link/packetsocket/BUILD b/pkg/tcpip/link/packetsocket/BUILD
index e51246c8c6..ccb4e06b41 100644
--- a/pkg/tcpip/link/packetsocket/BUILD
+++ b/pkg/tcpip/link/packetsocket/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "packetsocket",
diff --git a/pkg/tcpip/link/pipe/BUILD b/pkg/tcpip/link/pipe/BUILD
index 4b860b4faf..ce1de68ada 100644
--- a/pkg/tcpip/link/pipe/BUILD
+++ b/pkg/tcpip/link/pipe/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "pipe",
diff --git a/pkg/tcpip/link/qdisc/fifo/BUILD b/pkg/tcpip/link/qdisc/fifo/BUILD
index bfb4744c75..731606c6a3 100644
--- a/pkg/tcpip/link/qdisc/fifo/BUILD
+++ b/pkg/tcpip/link/qdisc/fifo/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fifo",
diff --git a/pkg/tcpip/link/rawfile/BUILD b/pkg/tcpip/link/rawfile/BUILD
index 4efd7c45ef..3d7d142ce7 100644
--- a/pkg/tcpip/link/rawfile/BUILD
+++ b/pkg/tcpip/link/rawfile/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "rawfile",
diff --git a/pkg/tcpip/link/sharedmem/BUILD b/pkg/tcpip/link/sharedmem/BUILD
index b153dd63b2..352b026194 100644
--- a/pkg/tcpip/link/sharedmem/BUILD
+++ b/pkg/tcpip/link/sharedmem/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sharedmem",
diff --git a/pkg/tcpip/link/sharedmem/pipe/BUILD b/pkg/tcpip/link/sharedmem/pipe/BUILD
index 13681ac548..6525601dda 100644
--- a/pkg/tcpip/link/sharedmem/pipe/BUILD
+++ b/pkg/tcpip/link/sharedmem/pipe/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "pipe",
diff --git a/pkg/tcpip/link/sharedmem/queue/BUILD b/pkg/tcpip/link/sharedmem/queue/BUILD
index 32f89700bd..de9bc7ade3 100644
--- a/pkg/tcpip/link/sharedmem/queue/BUILD
+++ b/pkg/tcpip/link/sharedmem/queue/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "queue",
diff --git a/pkg/tcpip/link/sniffer/BUILD b/pkg/tcpip/link/sniffer/BUILD
index 74b7d2f307..66dad14de1 100644
--- a/pkg/tcpip/link/sniffer/BUILD
+++ b/pkg/tcpip/link/sniffer/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sniffer",
diff --git a/pkg/tcpip/link/stopfd/BUILD b/pkg/tcpip/link/stopfd/BUILD
index a299f1e03e..ae779b5176 100644
--- a/pkg/tcpip/link/stopfd/BUILD
+++ b/pkg/tcpip/link/stopfd/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "stopfd",
diff --git a/pkg/tcpip/link/tun/BUILD b/pkg/tcpip/link/tun/BUILD
index 3c7b5215b2..2c5d56f198 100644
--- a/pkg/tcpip/link/tun/BUILD
+++ b/pkg/tcpip/link/tun/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "tun_endpoint_refs",
diff --git a/pkg/tcpip/link/waitable/BUILD b/pkg/tcpip/link/waitable/BUILD
index e15c2ab2e5..933aae3308 100644
--- a/pkg/tcpip/link/waitable/BUILD
+++ b/pkg/tcpip/link/waitable/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "waitable",
diff --git a/pkg/tcpip/link/xdp/BUILD b/pkg/tcpip/link/xdp/BUILD
index 07ec8f7447..2139a15efb 100644
--- a/pkg/tcpip/link/xdp/BUILD
+++ b/pkg/tcpip/link/xdp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "xdp",
diff --git a/pkg/tcpip/network/BUILD b/pkg/tcpip/network/BUILD
index d118a0343e..3325ca6e8a 100644
--- a/pkg/tcpip/network/BUILD
+++ b/pkg/tcpip/network/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "ip_test",
diff --git a/pkg/tcpip/network/arp/BUILD b/pkg/tcpip/network/arp/BUILD
index 0cd4c24bd5..df2623dc80 100644
--- a/pkg/tcpip/network/arp/BUILD
+++ b/pkg/tcpip/network/arp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "arp",
diff --git a/pkg/tcpip/network/hash/BUILD b/pkg/tcpip/network/hash/BUILD
index 8721658661..ba0d79d3ec 100644
--- a/pkg/tcpip/network/hash/BUILD
+++ b/pkg/tcpip/network/hash/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "hash",
diff --git a/pkg/tcpip/network/internal/fragmentation/BUILD b/pkg/tcpip/network/internal/fragmentation/BUILD
index 826738acad..e68dfecc77 100644
--- a/pkg/tcpip/network/internal/fragmentation/BUILD
+++ b/pkg/tcpip/network/internal/fragmentation/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "reassembler_list",
diff --git a/pkg/tcpip/network/internal/ip/BUILD b/pkg/tcpip/network/internal/ip/BUILD
index b875bdc435..d969009d96 100644
--- a/pkg/tcpip/network/internal/ip/BUILD
+++ b/pkg/tcpip/network/internal/ip/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ip",
diff --git a/pkg/tcpip/network/internal/multicast/BUILD b/pkg/tcpip/network/internal/multicast/BUILD
index 3b2619d7aa..cdd7f8e000 100644
--- a/pkg/tcpip/network/internal/multicast/BUILD
+++ b/pkg/tcpip/network/internal/multicast/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "multicast",
diff --git a/pkg/tcpip/network/internal/testutil/BUILD b/pkg/tcpip/network/internal/testutil/BUILD
index 4bb8f59cb9..afa508d22c 100644
--- a/pkg/tcpip/network/internal/testutil/BUILD
+++ b/pkg/tcpip/network/internal/testutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "testutil",
diff --git a/pkg/tcpip/network/ipv4/BUILD b/pkg/tcpip/network/ipv4/BUILD
index 0295a82c22..41aca57225 100644
--- a/pkg/tcpip/network/ipv4/BUILD
+++ b/pkg/tcpip/network/ipv4/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ipv4",
diff --git a/pkg/tcpip/network/ipv6/BUILD b/pkg/tcpip/network/ipv6/BUILD
index d7ade924dc..c43baa1e61 100644
--- a/pkg/tcpip/network/ipv6/BUILD
+++ b/pkg/tcpip/network/ipv6/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ipv6",
diff --git a/pkg/tcpip/ports/BUILD b/pkg/tcpip/ports/BUILD
index 8b1169c904..97be46d907 100644
--- a/pkg/tcpip/ports/BUILD
+++ b/pkg/tcpip/ports/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ports",
diff --git a/pkg/tcpip/prependable/BUILD b/pkg/tcpip/prependable/BUILD
index 9bcb9368e6..e59fbf8716 100644
--- a/pkg/tcpip/prependable/BUILD
+++ b/pkg/tcpip/prependable/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "prependable",
diff --git a/pkg/tcpip/sample/tun_tcp_connect/BUILD b/pkg/tcpip/sample/tun_tcp_connect/BUILD
index db9b918159..b2737716a0 100644
--- a/pkg/tcpip/sample/tun_tcp_connect/BUILD
+++ b/pkg/tcpip/sample/tun_tcp_connect/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "tun_tcp_connect",
diff --git a/pkg/tcpip/sample/tun_tcp_echo/BUILD b/pkg/tcpip/sample/tun_tcp_echo/BUILD
index 43264b76d9..5268dbe28c 100644
--- a/pkg/tcpip/sample/tun_tcp_echo/BUILD
+++ b/pkg/tcpip/sample/tun_tcp_echo/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "tun_tcp_echo",
diff --git a/pkg/tcpip/seqnum/BUILD b/pkg/tcpip/seqnum/BUILD
index 45f5038455..fb3e283ae5 100644
--- a/pkg/tcpip/seqnum/BUILD
+++ b/pkg/tcpip/seqnum/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "seqnum",
diff --git a/pkg/tcpip/stack/BUILD b/pkg/tcpip/stack/BUILD
index 81d3e11685..8cddaf9610 100644
--- a/pkg/tcpip/stack/BUILD
+++ b/pkg/tcpip/stack/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "go_library", "go_test", "most_shards")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 declare_rwmutex(
     name = "addressable_endpoint_state_mutex",
diff --git a/pkg/tcpip/tests/integration/BUILD b/pkg/tcpip/tests/integration/BUILD
index 40abb1c21c..4c241acd62 100644
--- a/pkg/tcpip/tests/integration/BUILD
+++ b/pkg/tcpip/tests/integration/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "forward_test",
diff --git a/pkg/tcpip/tests/utils/BUILD b/pkg/tcpip/tests/utils/BUILD
index ad3939c720..8ef41b3123 100644
--- a/pkg/tcpip/tests/utils/BUILD
+++ b/pkg/tcpip/tests/utils/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "utils",
diff --git a/pkg/tcpip/testutil/BUILD b/pkg/tcpip/testutil/BUILD
index 02ee86ff1e..fe0157f9ac 100644
--- a/pkg/tcpip/testutil/BUILD
+++ b/pkg/tcpip/testutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "testutil",
diff --git a/pkg/tcpip/transport/BUILD b/pkg/tcpip/transport/BUILD
index 33e6557b52..96ef20e6e5 100644
--- a/pkg/tcpip/transport/BUILD
+++ b/pkg/tcpip/transport/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "transport",
diff --git a/pkg/tcpip/transport/icmp/BUILD b/pkg/tcpip/transport/icmp/BUILD
index f8485845cf..0708a0bf9e 100644
--- a/pkg/tcpip/transport/icmp/BUILD
+++ b/pkg/tcpip/transport/icmp/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "icmp_packet_list",
diff --git a/pkg/tcpip/transport/internal/network/BUILD b/pkg/tcpip/transport/internal/network/BUILD
index 2d5b382690..e995eaf164 100644
--- a/pkg/tcpip/transport/internal/network/BUILD
+++ b/pkg/tcpip/transport/internal/network/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "network",
diff --git a/pkg/tcpip/transport/internal/noop/BUILD b/pkg/tcpip/transport/internal/noop/BUILD
index 171c41eb18..fb204e6e22 100644
--- a/pkg/tcpip/transport/internal/noop/BUILD
+++ b/pkg/tcpip/transport/internal/noop/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "noop",
diff --git a/pkg/tcpip/transport/packet/BUILD b/pkg/tcpip/transport/packet/BUILD
index 1c44ac673a..a47898b516 100644
--- a/pkg/tcpip/transport/packet/BUILD
+++ b/pkg/tcpip/transport/packet/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "packet_list",
diff --git a/pkg/tcpip/transport/raw/BUILD b/pkg/tcpip/transport/raw/BUILD
index 5012f4723b..9a31da141c 100644
--- a/pkg/tcpip/transport/raw/BUILD
+++ b/pkg/tcpip/transport/raw/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "raw_packet_list",
diff --git a/pkg/tcpip/transport/tcp/BUILD b/pkg/tcpip/transport/tcp/BUILD
index f63075d08b..d1b6dfecd0 100644
--- a/pkg/tcpip/transport/tcp/BUILD
+++ b/pkg/tcpip/transport/tcp/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "tcp_segment_list",
diff --git a/pkg/tcpip/transport/tcp/test/e2e/BUILD b/pkg/tcpip/transport/tcp/test/e2e/BUILD
index 5a674fbd81..235a748bf5 100644
--- a/pkg/tcpip/transport/tcp/test/e2e/BUILD
+++ b/pkg/tcpip/transport/tcp/test/e2e/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test", "more_shards")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "tcp_test",
diff --git a/pkg/tcpip/transport/tcp/testing/context/BUILD b/pkg/tcpip/transport/tcp/testing/context/BUILD
index bdbab2fdce..3996767615 100644
--- a/pkg/tcpip/transport/tcp/testing/context/BUILD
+++ b/pkg/tcpip/transport/tcp/testing/context/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "context",
diff --git a/pkg/tcpip/transport/tcpconntrack/BUILD b/pkg/tcpip/transport/tcpconntrack/BUILD
index d6221fe7d2..50b3e90e06 100644
--- a/pkg/tcpip/transport/tcpconntrack/BUILD
+++ b/pkg/tcpip/transport/tcpconntrack/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "tcpconntrack",
diff --git a/pkg/tcpip/transport/testing/context/BUILD b/pkg/tcpip/transport/testing/context/BUILD
index de17924957..abe315b4ee 100644
--- a/pkg/tcpip/transport/testing/context/BUILD
+++ b/pkg/tcpip/transport/testing/context/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "context",
diff --git a/pkg/tcpip/transport/udp/BUILD b/pkg/tcpip/transport/udp/BUILD
index 1ed99be764..291e614235 100644
--- a/pkg/tcpip/transport/udp/BUILD
+++ b/pkg/tcpip/transport/udp/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "udp_packet_list",
diff --git a/pkg/test/criutil/BUILD b/pkg/test/criutil/BUILD
index a7b082cee7..7012fc1747 100644
--- a/pkg/test/criutil/BUILD
+++ b/pkg/test/criutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "criutil",
diff --git a/pkg/test/dockerutil/BUILD b/pkg/test/dockerutil/BUILD
index 3a535b0e81..af902403b6 100644
--- a/pkg/test/dockerutil/BUILD
+++ b/pkg/test/dockerutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "dockerutil",
diff --git a/pkg/test/testutil/BUILD b/pkg/test/testutil/BUILD
index 8b4797e127..6c66092b0c 100644
--- a/pkg/test/testutil/BUILD
+++ b/pkg/test/testutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "testutil",
diff --git a/pkg/trie/BUILD b/pkg/trie/BUILD
index b645e714b1..89c98ad5dd 100644
--- a/pkg/trie/BUILD
+++ b/pkg/trie/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "trie",
diff --git a/pkg/unet/BUILD b/pkg/unet/BUILD
index a78d3ebf8a..3d1d3c8db2 100644
--- a/pkg/unet/BUILD
+++ b/pkg/unet/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "unet",
diff --git a/pkg/urpc/BUILD b/pkg/urpc/BUILD
index 850c34ed0f..64df5c1a35 100644
--- a/pkg/urpc/BUILD
+++ b/pkg/urpc/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "urpc",
diff --git a/pkg/usermem/BUILD b/pkg/usermem/BUILD
index 9c37a96260..698a013e44 100644
--- a/pkg/usermem/BUILD
+++ b/pkg/usermem/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "usermem",
diff --git a/pkg/waiter/BUILD b/pkg/waiter/BUILD
index 5ad715f1e8..f1fa7a7d9a 100644
--- a/pkg/waiter/BUILD
+++ b/pkg/waiter/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "waiter_list",
diff --git a/pkg/xdp/BUILD b/pkg/xdp/BUILD
index e6e8b1dbe5..302cd00d6b 100644
--- a/pkg/xdp/BUILD
+++ b/pkg/xdp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "xdp",
diff --git a/runsc/BUILD b/runsc/BUILD
index a26ac92918..f85e6d3b8f 100644
--- a/runsc/BUILD
+++ b/runsc/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "runsc",
diff --git a/runsc/boot/BUILD b/runsc/boot/BUILD
index 91cdcd6e85..948a9ff8f5 100644
--- a/runsc/boot/BUILD
+++ b/runsc/boot/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "boot",
diff --git a/runsc/boot/filter/BUILD b/runsc/boot/filter/BUILD
index 24ad5dbba3..2a68edb02d 100644
--- a/runsc/boot/filter/BUILD
+++ b/runsc/boot/filter/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "filter",
diff --git a/runsc/boot/platforms/BUILD b/runsc/boot/platforms/BUILD
index d45ab46741..34236738c6 100644
--- a/runsc/boot/platforms/BUILD
+++ b/runsc/boot/platforms/BUILD
@@ -3,7 +3,10 @@
 # operating-specific dependencies listed below.
 load("//tools:defs.bzl", "platforms", "select_system", exempt_go_library = "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 exempt_go_library(
     name = "platforms",
diff --git a/runsc/boot/portforward/BUILD b/runsc/boot/portforward/BUILD
index bf757a21fa..29388c795f 100644
--- a/runsc/boot/portforward/BUILD
+++ b/runsc/boot/portforward/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "portforward",
diff --git a/runsc/boot/pprof/BUILD b/runsc/boot/pprof/BUILD
index 29cb42b2fc..c69c0717cc 100644
--- a/runsc/boot/pprof/BUILD
+++ b/runsc/boot/pprof/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "pprof",
diff --git a/runsc/boot/procfs/BUILD b/runsc/boot/procfs/BUILD
index ae0e2b6ae2..1f398a32f7 100644
--- a/runsc/boot/procfs/BUILD
+++ b/runsc/boot/procfs/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "procfs",
diff --git a/runsc/cgroup/BUILD b/runsc/cgroup/BUILD
index a8a0857617..f810fca3c8 100644
--- a/runsc/cgroup/BUILD
+++ b/runsc/cgroup/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cgroup",
diff --git a/runsc/cli/BUILD b/runsc/cli/BUILD
index 8f692cd274..f4c8bb1a20 100644
--- a/runsc/cli/BUILD
+++ b/runsc/cli/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cli",
diff --git a/runsc/cmd/BUILD b/runsc/cmd/BUILD
index 978718c9fa..cb0a3aa01b 100644
--- a/runsc/cmd/BUILD
+++ b/runsc/cmd/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cmd",
diff --git a/runsc/cmd/trace/BUILD b/runsc/cmd/trace/BUILD
index 9149a3881f..8a1bae6a52 100644
--- a/runsc/cmd/trace/BUILD
+++ b/runsc/cmd/trace/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "trace",
diff --git a/runsc/cmd/util/BUILD b/runsc/cmd/util/BUILD
index 6a2f1379cf..25eb274ff0 100644
--- a/runsc/cmd/util/BUILD
+++ b/runsc/cmd/util/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "util",
diff --git a/runsc/config/BUILD b/runsc/config/BUILD
index 0a4b1867ac..8db4bdb266 100644
--- a/runsc/config/BUILD
+++ b/runsc/config/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "config",
diff --git a/runsc/console/BUILD b/runsc/console/BUILD
index b22252d8ac..5693ba0d49 100644
--- a/runsc/console/BUILD
+++ b/runsc/console/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "console",
diff --git a/runsc/container/BUILD b/runsc/container/BUILD
index 8e454a928a..8788651b95 100644
--- a/runsc/container/BUILD
+++ b/runsc/container/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "default_platform", "go_library", "go_test", "more_shards", "platforms")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "container",
diff --git a/runsc/donation/BUILD b/runsc/donation/BUILD
index f355f4b8bb..5df044d638 100644
--- a/runsc/donation/BUILD
+++ b/runsc/donation/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "donation",
diff --git a/runsc/flag/BUILD b/runsc/flag/BUILD
index 5cb7604a86..a30f8637fe 100644
--- a/runsc/flag/BUILD
+++ b/runsc/flag/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "flag",
diff --git a/runsc/fsgofer/BUILD b/runsc/fsgofer/BUILD
index c29aa0efaf..eeb326e203 100644
--- a/runsc/fsgofer/BUILD
+++ b/runsc/fsgofer/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "fsgofer",
diff --git a/runsc/fsgofer/filter/BUILD b/runsc/fsgofer/filter/BUILD
index 8862759919..ca90e7d1a5 100644
--- a/runsc/fsgofer/filter/BUILD
+++ b/runsc/fsgofer/filter/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "filter",
diff --git a/runsc/mitigate/BUILD b/runsc/mitigate/BUILD
index 9f4a7ba8d7..baafe2aa23 100644
--- a/runsc/mitigate/BUILD
+++ b/runsc/mitigate/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "mitigate",
diff --git a/runsc/profile/BUILD b/runsc/profile/BUILD
index aa3a4f4f22..16c055a5c2 100644
--- a/runsc/profile/BUILD
+++ b/runsc/profile/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "profile",
diff --git a/runsc/sandbox/BUILD b/runsc/sandbox/BUILD
index a66d027fcf..64a8f3132a 100644
--- a/runsc/sandbox/BUILD
+++ b/runsc/sandbox/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sandbox",
diff --git a/runsc/sandbox/bpf/BUILD b/runsc/sandbox/bpf/BUILD
index 9a7bea97a6..5d88f0e950 100644
--- a/runsc/sandbox/bpf/BUILD
+++ b/runsc/sandbox/bpf/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bpf_program")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 bpf_program(
     name = "af_xdp_ebpf",
diff --git a/runsc/specutils/BUILD b/runsc/specutils/BUILD
index 945e0131f6..342581bf26 100644
--- a/runsc/specutils/BUILD
+++ b/runsc/specutils/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "specutils",
diff --git a/runsc/specutils/safemount_test/BUILD b/runsc/specutils/safemount_test/BUILD
index c39c40492b..d415076c80 100644
--- a/runsc/specutils/safemount_test/BUILD
+++ b/runsc/specutils/safemount_test/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "safemount_test",
diff --git a/runsc/specutils/seccomp/BUILD b/runsc/specutils/seccomp/BUILD
index c5f5b863e9..f3c6cfb2cc 100644
--- a/runsc/specutils/seccomp/BUILD
+++ b/runsc/specutils/seccomp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "seccomp",
diff --git a/shim/BUILD b/shim/BUILD
index 695f61eb97..f78ee619e1 100644
--- a/shim/BUILD
+++ b/shim/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary", "pkg_tar")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "containerd-shim-runsc-v1",
diff --git a/shim/cli/BUILD b/shim/cli/BUILD
index 665dcc5a18..4eb42f3197 100644
--- a/shim/cli/BUILD
+++ b/shim/cli/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cli",
diff --git a/test/BUILD b/test/BUILD
index 34b950644d..0374e2dd19 100644
--- a/test/BUILD
+++ b/test/BUILD
@@ -1 +1,4 @@
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
diff --git a/test/benchmarks/BUILD b/test/benchmarks/BUILD
index faf310676d..b8931ba248 100644
--- a/test/benchmarks/BUILD
+++ b/test/benchmarks/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bzl_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 bzl_library(
     name = "defs_bzl",
diff --git a/test/benchmarks/base/BUILD b/test/benchmarks/base/BUILD
index e7b73d15f5..110f3b8dfe 100644
--- a/test/benchmarks/base/BUILD
+++ b/test/benchmarks/base/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "base",
diff --git a/test/benchmarks/database/BUILD b/test/benchmarks/database/BUILD
index fee2695ff7..cd3dcfe548 100644
--- a/test/benchmarks/database/BUILD
+++ b/test/benchmarks/database/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "database",
diff --git a/test/benchmarks/fs/BUILD b/test/benchmarks/fs/BUILD
index 30fb083c4d..79a7008a03 100644
--- a/test/benchmarks/fs/BUILD
+++ b/test/benchmarks/fs/BUILD
@@ -1,6 +1,9 @@
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 benchmark_test(
     name = "bazel_test",
diff --git a/test/benchmarks/fs/fsbench/BUILD b/test/benchmarks/fs/fsbench/BUILD
index eeab4aa50b..2474540579 100644
--- a/test/benchmarks/fs/fsbench/BUILD
+++ b/test/benchmarks/fs/fsbench/BUILD
@@ -3,6 +3,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/benchmarks/fs:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/benchmarks/harness/BUILD b/test/benchmarks/harness/BUILD
index 3673166616..4848d07b51 100644
--- a/test/benchmarks/harness/BUILD
+++ b/test/benchmarks/harness/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "harness",
diff --git a/test/benchmarks/media/BUILD b/test/benchmarks/media/BUILD
index ad2ef3a55d..bdc2edd0df 100644
--- a/test/benchmarks/media/BUILD
+++ b/test/benchmarks/media/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "media",
diff --git a/test/benchmarks/ml/BUILD b/test/benchmarks/ml/BUILD
index 56a4d4f397..745db92808 100644
--- a/test/benchmarks/ml/BUILD
+++ b/test/benchmarks/ml/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "ml",
diff --git a/test/benchmarks/network/BUILD b/test/benchmarks/network/BUILD
index e047020bf7..5036968ef4 100644
--- a/test/benchmarks/network/BUILD
+++ b/test/benchmarks/network/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//test/benchmarks:defs.bzl", "benchmark_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "network",
diff --git a/test/benchmarks/tcp/BUILD b/test/benchmarks/tcp/BUILD
index 2102c78abb..4442753a63 100644
--- a/test/benchmarks/tcp/BUILD
+++ b/test/benchmarks/tcp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "cc_binary", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "tcp_proxy",
diff --git a/test/benchmarks/tools/BUILD b/test/benchmarks/tools/BUILD
index f155950a68..da6c6889d6 100644
--- a/test/benchmarks/tools/BUILD
+++ b/test/benchmarks/tools/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "tools",
diff --git a/test/cmd/test_app/BUILD b/test/cmd/test_app/BUILD
index 25f91acbb2..c02fc3d20b 100644
--- a/test/cmd/test_app/BUILD
+++ b/test/cmd/test_app/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "test_app",
diff --git a/test/e2e/BUILD b/test/e2e/BUILD
index d8db4d4070..21a0df0498 100644
--- a/test/e2e/BUILD
+++ b/test/e2e/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "integration_test",
diff --git a/test/fsstress/BUILD b/test/fsstress/BUILD
index 402445a7ef..9aa9ef77d2 100644
--- a/test/fsstress/BUILD
+++ b/test/fsstress/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "fsstress_test",
diff --git a/test/image/BUILD b/test/image/BUILD
index e749e47d48..af7fd04e1e 100644
--- a/test/image/BUILD
+++ b/test/image/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "image_test",
diff --git a/test/iptables/BUILD b/test/iptables/BUILD
index 9805665acd..460fedd28b 100644
--- a/test/iptables/BUILD
+++ b/test/iptables/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "iptables",
diff --git a/test/iptables/runner/BUILD b/test/iptables/runner/BUILD
index 24504a1b98..8e8583cb0a 100644
--- a/test/iptables/runner/BUILD
+++ b/test/iptables/runner/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "runner",
diff --git a/test/metricclient/BUILD b/test/metricclient/BUILD
index 14caf059cd..a6bb40507a 100644
--- a/test/metricclient/BUILD
+++ b/test/metricclient/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "metricclient",
diff --git a/test/packetdrill/BUILD b/test/packetdrill/BUILD
index de66cbe6d7..c123ddeb2e 100644
--- a/test/packetdrill/BUILD
+++ b/test/packetdrill/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "bzl_library")
 load("//test/packetdrill:defs.bzl", "packetdrill_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 packetdrill_test(
     name = "packetdrill_sanity_test",
diff --git a/test/packetimpact/dut/BUILD b/test/packetimpact/dut/BUILD
index 3b7edc0d66..b68db3c3c6 100644
--- a/test/packetimpact/dut/BUILD
+++ b/test/packetimpact/dut/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "cc_binary", "go_library", "grpcpp")
 
 package(
+    default_applicable_licenses = ["//:license"],
     licenses = ["notice"],
 )
 
diff --git a/test/packetimpact/dut/linux/BUILD b/test/packetimpact/dut/linux/BUILD
index 609db7a548..0d2dffbad9 100644
--- a/test/packetimpact/dut/linux/BUILD
+++ b/test/packetimpact/dut/linux/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact/dut:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/packetimpact/dut/native/BUILD b/test/packetimpact/dut/native/BUILD
index c9565ce2fd..e6fe6e93f9 100644
--- a/test/packetimpact/dut/native/BUILD
+++ b/test/packetimpact/dut/native/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_binary")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/packetimpact/dut/runsc/BUILD b/test/packetimpact/dut/runsc/BUILD
index cdf5dac59b..51259d59cd 100644
--- a/test/packetimpact/dut/runsc/BUILD
+++ b/test/packetimpact/dut/runsc/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_binary")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/packetimpact/internal/testing/BUILD b/test/packetimpact/internal/testing/BUILD
index 9509df18ee..507f1e93e9 100644
--- a/test/packetimpact/internal/testing/BUILD
+++ b/test/packetimpact/internal/testing/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     licenses = ["notice"],
 )
 
diff --git a/test/packetimpact/netdevs/netlink/BUILD b/test/packetimpact/netdevs/netlink/BUILD
index 2317b4f4fd..c1d4213064 100644
--- a/test/packetimpact/netdevs/netlink/BUILD
+++ b/test/packetimpact/netdevs/netlink/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     licenses = ["notice"],
 )
 
diff --git a/test/packetimpact/proto/BUILD b/test/packetimpact/proto/BUILD
index 4a4370f42e..dee63f49a6 100644
--- a/test/packetimpact/proto/BUILD
+++ b/test/packetimpact/proto/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "proto_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/packetimpact/runner/BUILD b/test/packetimpact/runner/BUILD
index 59bd634a39..51c68cb759 100644
--- a/test/packetimpact/runner/BUILD
+++ b/test/packetimpact/runner/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/packetimpact/testbench/BUILD b/test/packetimpact/testbench/BUILD
index 6d249cf3d9..c27044f135 100644
--- a/test/packetimpact/testbench/BUILD
+++ b/test/packetimpact/testbench/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
 package(
+    default_applicable_licenses = ["//:license"],
     licenses = ["notice"],
 )
 
diff --git a/test/packetimpact/tests/BUILD b/test/packetimpact/tests/BUILD
index e2d6b98080..480e30b09f 100644
--- a/test/packetimpact/tests/BUILD
+++ b/test/packetimpact/tests/BUILD
@@ -1,6 +1,7 @@
 load("//test/packetimpact/runner:defs.bzl", "ALL_TESTS", "packetimpact_go_test", "packetimpact_testbench", "validate_all_tests")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//test/packetimpact:__subpackages__"],
     licenses = ["notice"],
 )
diff --git a/test/perf/BUILD b/test/perf/BUILD
index 08e04d8adb..3c5bb3e4e6 100644
--- a/test/perf/BUILD
+++ b/test/perf/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "more_shards")
 load("//test/runner:defs.bzl", "syscall_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 syscall_test(
     debug = False,
diff --git a/test/perf/linux/BUILD b/test/perf/linux/BUILD
index 2ab3c955a8..bf7545cb89 100644
--- a/test/perf/linux/BUILD
+++ b/test/perf/linux/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "cc_binary", "gbenchmark", "gtest")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/test/root/BUILD b/test/root/BUILD
index 9c1054e3c5..f7cc6a21ef 100644
--- a/test/root/BUILD
+++ b/test/root/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "root",
diff --git a/test/runner/BUILD b/test/runner/BUILD
index 48a8ef3a14..1b98f4fe7e 100644
--- a/test/runner/BUILD
+++ b/test/runner/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "runner",
diff --git a/test/runner/fuse/BUILD b/test/runner/fuse/BUILD
index cb4c185a15..c8b9e24b9a 100644
--- a/test/runner/fuse/BUILD
+++ b/test/runner/fuse/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "fuse",
diff --git a/test/runner/gtest/BUILD b/test/runner/gtest/BUILD
index de4b2727cb..2c0561a298 100644
--- a/test/runner/gtest/BUILD
+++ b/test/runner/gtest/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "gtest",
diff --git a/test/runner/setup_container/BUILD b/test/runner/setup_container/BUILD
index f879ef649f..3f7dcb0f37 100644
--- a/test/runner/setup_container/BUILD
+++ b/test/runner/setup_container/BUILD
@@ -3,7 +3,10 @@
 
 load("//tools:defs.bzl", "cc_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 cc_binary(
     name = "setup_container",
diff --git a/test/runtimes/BUILD b/test/runtimes/BUILD
index 39e69cd005..7d0f236cb1 100644
--- a/test/runtimes/BUILD
+++ b/test/runtimes/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "bzl_library", "more_shards", "most_shards")
 load("//test/runtimes:defs.bzl", "runtime_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 runtime_test(
     name = "go1.16",
diff --git a/test/runtimes/proctor/BUILD b/test/runtimes/proctor/BUILD
index b4a9b12de1..175d6a5b33 100644
--- a/test/runtimes/proctor/BUILD
+++ b/test/runtimes/proctor/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "proctor",
diff --git a/test/runtimes/proctor/lib/BUILD b/test/runtimes/proctor/lib/BUILD
index f834f1b5ac..5346f0c673 100644
--- a/test/runtimes/proctor/lib/BUILD
+++ b/test/runtimes/proctor/lib/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "lib",
diff --git a/test/runtimes/runner/BUILD b/test/runtimes/runner/BUILD
index 091aff1f22..414a794c9a 100644
--- a/test/runtimes/runner/BUILD
+++ b/test/runtimes/runner/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "runner",
diff --git a/test/runtimes/runner/lib/BUILD b/test/runtimes/runner/lib/BUILD
index 3491c535b7..b72a81b706 100644
--- a/test/runtimes/runner/lib/BUILD
+++ b/test/runtimes/runner/lib/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "lib",
diff --git a/test/syscalls/BUILD b/test/syscalls/BUILD
index 4f6c408f53..32e573aef3 100644
--- a/test/syscalls/BUILD
+++ b/test/syscalls/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "more_shards", "most_shards")
 load("//test/runner:defs.bzl", "syscall_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 # Please keep syscall tests ordered alphabetically by name.
 
diff --git a/test/syscalls/linux/BUILD b/test/syscalls/linux/BUILD
index 5ed9db8d5d..e9d69d3089 100644
--- a/test/syscalls/linux/BUILD
+++ b/test/syscalls/linux/BUILD
@@ -2,6 +2,7 @@ load("//tools:arch.bzl", "select_arch")
 load("//tools:defs.bzl", "cc_binary", "cc_library", "gbenchmark", "gtest", "select_system")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/test/syscalls/linux/rseq/BUILD b/test/syscalls/linux/rseq/BUILD
index 4168b4931e..09b1d3dbe8 100644
--- a/test/syscalls/linux/rseq/BUILD
+++ b/test/syscalls/linux/rseq/BUILD
@@ -4,7 +4,10 @@
 load("//tools:arch.bzl", "select_arch")
 load("//tools:defs.bzl", "cc_flags_supplier", "cc_library", "cc_toolchain")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 genrule(
     name = "rseq_binary",
diff --git a/test/trace/BUILD b/test/trace/BUILD
index 7efe61d3ed..f9d51074d5 100644
--- a/test/trace/BUILD
+++ b/test/trace/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "trace_test",
diff --git a/test/trace/config/BUILD b/test/trace/config/BUILD
index b87bf4b539..22ac434f12 100644
--- a/test/trace/config/BUILD
+++ b/test/trace/config/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "config",
diff --git a/test/trace/workload/BUILD b/test/trace/workload/BUILD
index b69532b71b..34775163c2 100644
--- a/test/trace/workload/BUILD
+++ b/test/trace/workload/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "cc_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 cc_binary(
     name = "workload",
diff --git a/test/uds/BUILD b/test/uds/BUILD
index ab3aa27fcd..9011007c33 100644
--- a/test/uds/BUILD
+++ b/test/uds/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/test/util/BUILD b/test/util/BUILD
index 73ff61f81f..56f94e464a 100644
--- a/test/util/BUILD
+++ b/test/util/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "cc_library", "cc_test", "coreutil", "default_net_util", "gbenchmark_internal", "gtest", "select_system")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/tools/BUILD b/tools/BUILD
index 4064c80ded..0a55c54187 100644
--- a/tools/BUILD
+++ b/tools/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bzl_library", "gotsan_flag_values", "gotsan_values")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 config_setting(
     name = "debug",
diff --git a/tools/bazeldefs/BUILD b/tools/bazeldefs/BUILD
index 959ff4a6aa..56f616178b 100644
--- a/tools/bazeldefs/BUILD
+++ b/tools/bazeldefs/BUILD
@@ -1,6 +1,7 @@
 load("//tools:defs.bzl", "bzl_library")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//:sandbox"],
     licenses = ["notice"],
 )
diff --git a/tools/bigquery/BUILD b/tools/bigquery/BUILD
index 2fff29b537..b9ce0fe6a7 100644
--- a/tools/bigquery/BUILD
+++ b/tools/bigquery/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "bigquery",
diff --git a/tools/checkaligned/BUILD b/tools/checkaligned/BUILD
index 2e7e77207d..1c63cf9235 100644
--- a/tools/checkaligned/BUILD
+++ b/tools/checkaligned/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checkaligned",
diff --git a/tools/checkconst/BUILD b/tools/checkconst/BUILD
index 4269b35a5d..23dc14fa84 100644
--- a/tools/checkconst/BUILD
+++ b/tools/checkconst/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checkconst",
diff --git a/tools/checkescape/BUILD b/tools/checkescape/BUILD
index 2d50525d39..aab502ffc2 100644
--- a/tools/checkescape/BUILD
+++ b/tools/checkescape/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checkescape",
diff --git a/tools/checkescape/test1/BUILD b/tools/checkescape/test1/BUILD
index 7834032478..1a930dd2b1 100644
--- a/tools/checkescape/test1/BUILD
+++ b/tools/checkescape/test1/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "test1",
diff --git a/tools/checkescape/test2/BUILD b/tools/checkescape/test2/BUILD
index 5a11e4b432..89d8517abe 100644
--- a/tools/checkescape/test2/BUILD
+++ b/tools/checkescape/test2/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "test2",
diff --git a/tools/checklinkname/BUILD b/tools/checklinkname/BUILD
index 1ae3cbc834..a58af27199 100644
--- a/tools/checklinkname/BUILD
+++ b/tools/checklinkname/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checklinkname",
diff --git a/tools/checklinkname/test/BUILD b/tools/checklinkname/test/BUILD
index b29bd84f29..86b8fe0329 100644
--- a/tools/checklinkname/test/BUILD
+++ b/tools/checklinkname/test/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "test",
diff --git a/tools/checklocks/BUILD b/tools/checklocks/BUILD
index 4bf918f48e..7ac5689c1c 100644
--- a/tools/checklocks/BUILD
+++ b/tools/checklocks/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checklocks",
diff --git a/tools/checklocks/cmd/checklocks/BUILD b/tools/checklocks/cmd/checklocks/BUILD
index 563f58e389..9fd4e48ff9 100644
--- a/tools/checklocks/cmd/checklocks/BUILD
+++ b/tools/checklocks/cmd/checklocks/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_binary")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_binary(
     name = "checklocks",
     srcs = ["main.go"],
diff --git a/tools/checklocks/test/BUILD b/tools/checklocks/test/BUILD
index 9ef6a0a1b3..8a2441baa7 100644
--- a/tools/checklocks/test/BUILD
+++ b/tools/checklocks/test/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "test",
diff --git a/tools/checklocks/test/crosspkg/BUILD b/tools/checklocks/test/crosspkg/BUILD
index 03fa922973..d188a05197 100644
--- a/tools/checklocks/test/crosspkg/BUILD
+++ b/tools/checklocks/test/crosspkg/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "crosspkg",
diff --git a/tools/checkunsafe/BUILD b/tools/checkunsafe/BUILD
index 0bb07b415a..d19aa57896 100644
--- a/tools/checkunsafe/BUILD
+++ b/tools/checkunsafe/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "checkunsafe",
diff --git a/tools/constraintutil/BUILD b/tools/constraintutil/BUILD
index 004b708c47..c16fa0dad4 100644
--- a/tools/constraintutil/BUILD
+++ b/tools/constraintutil/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "constraintutil",
diff --git a/tools/github/BUILD b/tools/github/BUILD
index 3b170dfcd4..dc14d7fc32 100644
--- a/tools/github/BUILD
+++ b/tools/github/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "github",
diff --git a/tools/github/reviver/BUILD b/tools/github/reviver/BUILD
index 40cdadf43f..f93e4c63d2 100644
--- a/tools/github/reviver/BUILD
+++ b/tools/github/reviver/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "reviver",
diff --git a/tools/go_fieldenum/BUILD b/tools/go_fieldenum/BUILD
index 2bfdaeb2f1..c0cba3894a 100644
--- a/tools/go_fieldenum/BUILD
+++ b/tools/go_fieldenum/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_binary(
diff --git a/tools/go_generics/BUILD b/tools/go_generics/BUILD
index 78b6361305..5de0155cfb 100644
--- a/tools/go_generics/BUILD
+++ b/tools/go_generics/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "go_generics",
diff --git a/tools/go_generics/globals/BUILD b/tools/go_generics/globals/BUILD
index 38caa3ce7e..9886e9535c 100644
--- a/tools/go_generics/globals/BUILD
+++ b/tools/go_generics/globals/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "globals",
diff --git a/tools/go_generics/go_merge/BUILD b/tools/go_generics/go_merge/BUILD
index 211e6b3ed9..3aa711a607 100644
--- a/tools/go_generics/go_merge/BUILD
+++ b/tools/go_generics/go_merge/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "go_merge",
diff --git a/tools/go_generics/rules_tests/BUILD b/tools/go_generics/rules_tests/BUILD
index 8a329dfc6a..01738c8409 100644
--- a/tools/go_generics/rules_tests/BUILD
+++ b/tools/go_generics/rules_tests/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_test")
 load("//tools/go_generics:defs.bzl", "go_template", "go_template_instance")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_template_instance(
     name = "instance",
diff --git a/tools/go_generics/tests/BUILD b/tools/go_generics/tests/BUILD
index 7547a6b53c..798f730be3 100644
--- a/tools/go_generics/tests/BUILD
+++ b/tools/go_generics/tests/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "bzl_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 bzl_library(
     name = "defs_bzl",
     srcs = ["defs.bzl"],
diff --git a/tools/go_generics/tests/all_stmts/BUILD b/tools/go_generics/tests/all_stmts/BUILD
index a4a7c775a9..4ed3a129aa 100644
--- a/tools/go_generics/tests/all_stmts/BUILD
+++ b/tools/go_generics/tests/all_stmts/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "all_stmts",
     inputs = ["input.go"],
diff --git a/tools/go_generics/tests/all_types/BUILD b/tools/go_generics/tests/all_types/BUILD
index 60b1fd3142..db37e8d7ff 100644
--- a/tools/go_generics/tests/all_types/BUILD
+++ b/tools/go_generics/tests/all_types/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "all_types",
     inputs = ["input.go"],
diff --git a/tools/go_generics/tests/anon/BUILD b/tools/go_generics/tests/anon/BUILD
index ef24f4b25a..38ee483295 100644
--- a/tools/go_generics/tests/anon/BUILD
+++ b/tools/go_generics/tests/anon/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "anon",
     anon = True,
diff --git a/tools/go_generics/tests/consts/BUILD b/tools/go_generics/tests/consts/BUILD
index fd7caccad4..ce9d6736cf 100644
--- a/tools/go_generics/tests/consts/BUILD
+++ b/tools/go_generics/tests/consts/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "consts",
     consts = {
diff --git a/tools/go_generics/tests/imports/BUILD b/tools/go_generics/tests/imports/BUILD
index a86223d41b..4e3b61db3f 100644
--- a/tools/go_generics/tests/imports/BUILD
+++ b/tools/go_generics/tests/imports/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "imports",
     consts = {
diff --git a/tools/go_generics/tests/remove_typedef/BUILD b/tools/go_generics/tests/remove_typedef/BUILD
index 46457cec69..c8f245f9f7 100644
--- a/tools/go_generics/tests/remove_typedef/BUILD
+++ b/tools/go_generics/tests/remove_typedef/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "remove_typedef",
     inputs = ["input.go"],
diff --git a/tools/go_generics/tests/simple/BUILD b/tools/go_generics/tests/simple/BUILD
index 4b9265ea4d..d4a2c36d75 100644
--- a/tools/go_generics/tests/simple/BUILD
+++ b/tools/go_generics/tests/simple/BUILD
@@ -1,5 +1,7 @@
 load("//tools/go_generics/tests:defs.bzl", "go_generics_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 go_generics_test(
     name = "simple",
     inputs = ["input.go"],
diff --git a/tools/go_marshal/BUILD b/tools/go_marshal/BUILD
index 85a1adf665..3b05a33425 100644
--- a/tools/go_marshal/BUILD
+++ b/tools/go_marshal/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_binary(
diff --git a/tools/go_marshal/analysis/BUILD b/tools/go_marshal/analysis/BUILD
index c2a4d45c46..69699a09a8 100644
--- a/tools/go_marshal/analysis/BUILD
+++ b/tools/go_marshal/analysis/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/tools/go_marshal/gomarshal/BUILD b/tools/go_marshal/gomarshal/BUILD
index aaa203115d..9282046896 100644
--- a/tools/go_marshal/gomarshal/BUILD
+++ b/tools/go_marshal/gomarshal/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/tools/go_marshal/test/BUILD b/tools/go_marshal/test/BUILD
index d315be0604..6f069f567a 100644
--- a/tools/go_marshal/test/BUILD
+++ b/tools/go_marshal/test/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 package_group(
diff --git a/tools/go_marshal/test/escape/BUILD b/tools/go_marshal/test/escape/BUILD
index 62e0b4665b..300b72a37b 100644
--- a/tools/go_marshal/test/escape/BUILD
+++ b/tools/go_marshal/test/escape/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/tools/go_marshal/test/external/BUILD b/tools/go_marshal/test/external/BUILD
index 0cf6da6038..ade7306a73 100644
--- a/tools/go_marshal/test/external/BUILD
+++ b/tools/go_marshal/test/external/BUILD
@@ -1,5 +1,7 @@
 load("//tools:defs.bzl", "go_library")
 
+package(default_applicable_licenses = ["//:license"])
+
 licenses(["notice"])
 
 go_library(
diff --git a/tools/go_stateify/BUILD b/tools/go_stateify/BUILD
index ad66981c7a..78bcb0b4c1 100644
--- a/tools/go_stateify/BUILD
+++ b/tools/go_stateify/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "stateify",
diff --git a/tools/nogo/BUILD b/tools/nogo/BUILD
index 47357329bc..cfcfd35c92 100644
--- a/tools/nogo/BUILD
+++ b/tools/nogo/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "bzl_library", "go_binary", "select_goarch", "select_goos")
 load("//tools/nogo:defs.bzl", "nogo_stdlib", "nogo_target")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 nogo_target(
     name = "target",
diff --git a/tools/nogo/check/BUILD b/tools/nogo/check/BUILD
index 81197db64a..e8cd12657a 100644
--- a/tools/nogo/check/BUILD
+++ b/tools/nogo/check/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "check",
diff --git a/tools/nogo/cli/BUILD b/tools/nogo/cli/BUILD
index dcc8c4e18e..3b8a295bb0 100644
--- a/tools/nogo/cli/BUILD
+++ b/tools/nogo/cli/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cli",
diff --git a/tools/nogo/config/BUILD b/tools/nogo/config/BUILD
index 9d44613274..d41a7fe486 100644
--- a/tools/nogo/config/BUILD
+++ b/tools/nogo/config/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 exports_files(["schema.json"])
 
diff --git a/tools/nogo/facts/BUILD b/tools/nogo/facts/BUILD
index 755c9aba92..adc8b38976 100644
--- a/tools/nogo/facts/BUILD
+++ b/tools/nogo/facts/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "facts",
diff --git a/tools/nogo/flags/BUILD b/tools/nogo/flags/BUILD
index 87eccd32b1..dc433cca13 100644
--- a/tools/nogo/flags/BUILD
+++ b/tools/nogo/flags/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "flags",
diff --git a/tools/nogo/sanity/BUILD b/tools/nogo/sanity/BUILD
index 0573332087..684a05284f 100644
--- a/tools/nogo/sanity/BUILD
+++ b/tools/nogo/sanity/BUILD
@@ -1,7 +1,10 @@
 load("//tools:defs.bzl", "go_library")
 load("//tools/nogo:defs.bzl", "nogo_config", "nogo_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "sanity",
diff --git a/tools/parsers/BUILD b/tools/parsers/BUILD
index 6932bba9af..84067a2685 100644
--- a/tools/parsers/BUILD
+++ b/tools/parsers/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_test(
     name = "parsers_test",
diff --git a/tools/stucktasks/BUILD b/tools/stucktasks/BUILD
index d7ad3b0bcd..d9fdfa927c 100644
--- a/tools/stucktasks/BUILD
+++ b/tools/stucktasks/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "stucktasks",
diff --git a/tools/tracereplay/BUILD b/tools/tracereplay/BUILD
index 7787cded48..63e6afe6e7 100644
--- a/tools/tracereplay/BUILD
+++ b/tools/tracereplay/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library", "go_test")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "tracereplay",
diff --git a/tools/tracereplay/main/BUILD b/tools/tracereplay/main/BUILD
index 1e114b7da7..74c9e6f501 100644
--- a/tools/tracereplay/main/BUILD
+++ b/tools/tracereplay/main/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "tracereplay",
diff --git a/tools/xdp/BUILD b/tools/xdp/BUILD
index 91c5827b26..158d10929b 100644
--- a/tools/xdp/BUILD
+++ b/tools/xdp/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "xdp_loader",
diff --git a/tools/xdp/bpf/BUILD b/tools/xdp/bpf/BUILD
index b2b2f9c701..aedba5c633 100644
--- a/tools/xdp/bpf/BUILD
+++ b/tools/xdp/bpf/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "bpf_program")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 bpf_program(
     name = "pass_ebpf",
diff --git a/tools/yamltest/BUILD b/tools/yamltest/BUILD
index 475b3badd3..d3e1061652 100644
--- a/tools/yamltest/BUILD
+++ b/tools/yamltest/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "yamltest",
diff --git a/vdso/BUILD b/vdso/BUILD
index 37fb26a166..bc6aaf878d 100644
--- a/vdso/BUILD
+++ b/vdso/BUILD
@@ -6,7 +6,10 @@
 load("//tools:arch.bzl", "select_arch")
 load("//tools:defs.bzl", "cc_flags_supplier", "cc_toolchain", "vdso_linker_option")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 exports_files(["check_vdso.py"])
 
diff --git a/webhook/BUILD b/webhook/BUILD
index c14c7b0cde..ae94391d08 100644
--- a/webhook/BUILD
+++ b/webhook/BUILD
@@ -1,7 +1,10 @@
 load("//images:defs.bzl", "docker_image")
 load("//tools:defs.bzl", "go_binary", "pkg_tar")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 docker_image(
     name = "image",
diff --git a/webhook/pkg/cli/BUILD b/webhook/pkg/cli/BUILD
index ac093c5568..41823e6cb1 100644
--- a/webhook/pkg/cli/BUILD
+++ b/webhook/pkg/cli/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "cli",
diff --git a/webhook/pkg/injector/BUILD b/webhook/pkg/injector/BUILD
index 3d588b0cdd..f477bcd069 100644
--- a/webhook/pkg/injector/BUILD
+++ b/webhook/pkg/injector/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_library")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_library(
     name = "injector",
diff --git a/website/BUILD b/website/BUILD
index 086a5bb9c3..41c3e7cc96 100644
--- a/website/BUILD
+++ b/website/BUILD
@@ -2,7 +2,10 @@ load("//tools:defs.bzl", "bzl_library", "pkg_tar")
 load("//website:defs.bzl", "doc", "docs")
 load("//images:defs.bzl", "docker_image")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 docker_image(
     name = "website",
diff --git a/website/blog/BUILD b/website/blog/BUILD
index 65fcefbb80..adc4d5d0ef 100644
--- a/website/blog/BUILD
+++ b/website/blog/BUILD
@@ -1,6 +1,7 @@
 load("//website:defs.bzl", "doc", "docs")
 
 package(
+    default_applicable_licenses = ["//:license"],
     default_visibility = ["//website:__pkg__"],
     licenses = ["notice"],
 )
diff --git a/website/cmd/server/BUILD b/website/cmd/server/BUILD
index e4cf91e075..04b8937866 100644
--- a/website/cmd/server/BUILD
+++ b/website/cmd/server/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "server",
diff --git a/website/cmd/syscalldocs/BUILD b/website/cmd/syscalldocs/BUILD
index c5a0ed7fec..61c6314fd7 100644
--- a/website/cmd/syscalldocs/BUILD
+++ b/website/cmd/syscalldocs/BUILD
@@ -1,6 +1,9 @@
 load("//tools:defs.bzl", "go_binary")
 
-package(licenses = ["notice"])
+package(
+    default_applicable_licenses = ["//:license"],
+    licenses = ["notice"],
+)
 
 go_binary(
     name = "syscalldocs",