YES! Finally cracked it!
I created a file "15-mount-encrypted-system.rules" in /etc/polkit-1/rules.d :
Code:
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.udisks2.encrypted-unlock-system" &&
subject.active &&
subject.isInGroup("GroupName")) {
return polkit.Result.YES;
}
});
To open the partition without needing the root password, you must be the active user and in the group "GroupName" (whatever group you think is appropriate).
Now I can open a local encrypted partition just like external drives, without needing the admin password.
Many thanks to all for your help, and particularly to zeebra who pointed me to the documentation that (eventually!) provided a solution.
--
Pete
