diff --git a/scripts/image_signing/ensure_no_nonrelease_files.sh b/scripts/image_signing/ensure_no_nonrelease_files.sh
index 3b2dd7e..48c75af 100755
--- a/scripts/image_signing/ensure_no_nonrelease_files.sh
+++ b/scripts/image_signing/ensure_no_nonrelease_files.sh
@@ -41,10 +41,10 @@
     local rootfs=$(make_temp_dir)
     mount_loop_image_partition_ro "${loopdev}" 3 "${rootfs}"
     # Pick the right set of test-expectation data to use.
-    local boardvar=$(get_boardvar_from_lsb_release "${rootfs}")
-    eval "release_file_denylist=(\"\${RELEASE_FILE_DENYLIST_${boardvar}[@]}\")"
+    local brdvar=$(get_boardvar_from_lsb_release "${rootfs}")
+    eval "release_file_blocklist=(\"\${RELEASE_FILE_BLOCKLIST_${brdvar}[@]}\")"
 
-    for file in ${release_file_denylist}; do
+    for file in ${release_file_blocklist}; do
         if [ -e "${rootfs}/${file}" ]; then
             error "${file} exists in this image!"
             ls -al "${rootfs}/${file}"
diff --git a/scripts/image_signing/ensure_sane_lsb-release.sh b/scripts/image_signing/ensure_sane_lsb-release.sh
index 388a756..0846963 100755
--- a/scripts/image_signing/ensure_sane_lsb-release.sh
+++ b/scripts/image_signing/ensure_sane_lsb-release.sh
@@ -34,7 +34,7 @@
 
 # Usage: check_keyval_in_list lsbfile lsbkey [list of values]
 # Extracts the lsb-release value for the specified key, and confirms it
-# matches one of the allowlisted values specified in value_array.
+# matches one of the allowed values specified in value_array.
 # Implementation note:
 # You can't really pass bash arrays to functions. Best you can do is either
 # serialize to string/pass/deserialize (e.g. using whitspace/IFS hacks), or,
diff --git a/scripts/image_signing/sample-test-configs/ensure_no_nonrelease_files.config b/scripts/image_signing/sample-test-configs/ensure_no_nonrelease_files.config
index f98f330..3e7556b 100644
--- a/scripts/image_signing/sample-test-configs/ensure_no_nonrelease_files.config
+++ b/scripts/image_signing/sample-test-configs/ensure_no_nonrelease_files.config
@@ -6,7 +6,7 @@
 
 # Files/directories that should never be present in a clean,
 # standard release build. 
-RELEASE_FILE_DENYLIST=(
+RELEASE_FILE_BLOCKLIST=(
 # Flag-file indicating "developer mode", crosh offers "shell" if present:
 /root/.dev_mode