13.7. Locking Repartitioning

Procedure 13.7. To Prevent Users from Changing Disks Settings

1. Create a file with the same content as in /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy.

   cp /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy /etc/share/polkit-1/actions/org.freedesktop.udisks2.policy

   Do not change the /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy file, your changes will be overwritten by the next package update.
2. Delete the action you do not need and add the following lines to the /etc/polkit-1/actions/org.freedesktop.udisks2.policy file:

     <action id="org.freedesktop.udisks2.modify-device">
        <message>Authentication is required to modify the disks settings</message>
       <defaults>
         <allow_any>no</allow_any>
         <allow_inactive>no</allow_inactive>
         <allow_active>yes</allow_active>
       </defaults>
     </action>
   

   Replace no by auth_admin if you want to ensure only the root user is able to carry out the action.
3. Save the changes.