Six actions make up the entire rule language that decides what my machines show in /dev, and not one of them can execute anything. The other answer to the same problem grew a technique number in the ATT&CK catalogue. Unix Universe.