I want to prevent users to copy on usb devices and some others actions.
I was thinking of using polkit. Do you think it is a good solution or does someone know some alternatives ?

EDIT:

I also need to disable cd/dvd writing. How could I achieve this ? Polkit doesn't to be shipped with this kind of policy. I was thinking of disabling cdrecord for users.

Thanks