On 09/01/2018 10:16 PM, Didier Kryn wrote:
> Le 01/09/2018 à 14:10, fsmithred a écrit :
>>   Some apps have already replaced gksu with
>> pkexec in stretch/ascii, and I wish that solution worked in all cases.
>> There are plenty of posts from people who can't start synaptic from the
>> menu, and I know of one case of someone (me) who can start synaptic from
>> the menu and install packages without having to provide a password.
>
>     You pointed the culprit: pkexec uses polycy-kit (for the sole
> benefit of alowing to use it without a password).
[snip]

Last I checked, policy-kit was exceptionally complicated and difficult
to configure. It was nothing that could be done casually. It also
lacked most of the granularity of sudo. How much has it improved, if
any, in recent years?

/Lars