First version

files/lockdown/72-acpc-no-phone-access.rules

@@ -0,0 +1,7 @@
+# ACPC 2026: the desktop user gets no direct access to phones and cameras
+# (MTP and PTP, used to copy files), which bypasses the mounting of disks.
+# The tags are set by 69-libmtp.rules and 60-libgphoto2, and used by
+# 73-seat-late.rules, so this file sits between them.
+ENV{ID_MTP_DEVICE}=="1", TAG-="uaccess"
+ENV{ID_GPHOTO2}=="1", TAG-="uaccess"
+ENV{ID_MEDIA_PLAYER}=="1", TAG-="uaccess"