First version

files/lockdown/10-acpc-no-network-changes.rules

@@ -0,0 +1,9 @@
+// ACPC 2026: the teams may not change the network (Wi-Fi, phone hotspot,
+// modem, VPN, ...). Only the administrators (sudo group) keep these actions.
+polkit.addRule(function(action, subject) {
+    if ((action.id.indexOf("org.freedesktop.NetworkManager.") == 0 ||
+         action.id.indexOf("org.freedesktop.ModemManager1.") == 0) &&
+        !subject.isInGroup("sudo")) {
+        return polkit.Result.NO;
+    }
+});