Name: allow su without password (by package qubes-core-agent-passwordless-root) Default: yes Priority: 258 Auth-Type: Primary Auth: sufficient pam_succeed_if.so use_uid user ingroup qubes service in su:su-l