4

Is it safe to add noexec mount option while mounting devtmpfs on /dev? I am asking this because in my ubuntu machine the default option is rw,nosuid,realtime (found using cat /proc/mounts | grep /dev). Is there any reason for not adding noexec by default?

0

1 Answer 1

5

No.

There are still programs such as /sbin/v86d around, even now, that memory-map /dev/zero with PROT_EXEC, for no good reason.

Further reading

1
  • this is what I am looking for, tnx for your valuable response Apr 23, 2020 at 11:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .