Don't allow undefined symbols at all.

Signed-off-by: Peter Jones <pjones@redhat.com>

diff --git a/Makefile b/Makefile
index 03287373658fc42190756c4dc7221e0f3d32aef2..5483e8fa45a3707beaaeaf85f8908c7eb79540d6 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -131,7 +131,7 @@ ifneq ($(origin VENDOR_DBX_FILE), undefined)
        CFLAGS += -DVENDOR_DBX_FILE=\"$(VENDOR_DBX_FILE)\"
 endif
 
-LDFLAGS                = --hash-style=sysv -nostdlib -znocombreloc -T $(EFI_LDS) -shared -Bsymbolic -L$(EFI_PATH) -L$(LIBDIR) -LCryptlib -LCryptlib/OpenSSL $(EFI_CRT_OBJS) --build-id=sha1 $(ARCH_LDFLAGS)
+LDFLAGS                = --hash-style=sysv -nostdlib -znocombreloc -T $(EFI_LDS) -shared -Bsymbolic -L$(EFI_PATH) -L$(LIBDIR) -LCryptlib -LCryptlib/OpenSSL $(EFI_CRT_OBJS) --build-id=sha1 $(ARCH_LDFLAGS) --no-undefined
 
 TARGETS        = $(SHIMNAME)
 TARGETS += $(SHIMNAME).debug $(MMNAME).debug $(FBNAME).debug