Is it safe to add noexec mount option in /dev?

Question

Is it safe to add noexec mount option while mounting devtmpfs on /dev? I am asking this because in my ubuntu machine the default option is rw,nosuid,realtime (found using cat /proc/mounts | grep /dev). Is there any reason for not adding noexec by default?

score 5 · Accepted Answer · answered Apr 23 '20 at 10:59

5

No.

There are still programs such as /sbin/v86d around, even now, that memory-map /dev/zero with PROT_EXEC, for no good reason.

Is it safe to add noexec mount option in /dev?

1 Answers1

No.

Further reading