Is set by just by schema alone for the file manager? Is it like like Kali Forensics mode or Tails, If I recall they mask udisks2 and do something else?
In Live Mode for Kicksecure, see also grub-live - boot an existing Host OS or VM into Live Mode and search for:
live-hardener