First version

files/lockdown/10-acpc-no-removable-media.rules

@@ -0,0 +1,8 @@
+// ACPC 2026: the teams may not mount USB sticks, disks or disk images.
+// Only the administrators (sudo group) keep the udisks actions.
+polkit.addRule(function(action, subject) {
+    if (action.id.indexOf("org.freedesktop.udisks2.") == 0 &&
+        !subject.isInGroup("sudo")) {
+        return polkit.Result.NO;
+    }
+});