A place to configure /tmp mount options

For Developers
1

Hi everyone!

I am interested in securing OpenWRT installations a bit more. How safe is it to add 'noexec' mount option to /tmp tmpfs -- would it break something? Other Linux distros (e.g. Oracle Linux) seem to have set it up that way quite a while ago while others (some Debian or debian-based ones) would always complain about some breakage with it.

What is the best place to have /tmp mount options set up? Compiling OpenWRT from its sources is never a problem.

Thanks in advance!
Best regards,
Viktor

2

Isn't it already mounted with noexec? This is how it looks like in my routers:

tmpfs on /dev type tmpfs (rw,nosuid,noexec,noatime,size=512k,mode=755)
3

The tmpfs is mounted by procd very early in the boot process and using hardcoded mount options.