core-agent-linux/passwordless-root/polkit-1-qubes-allow-all.rules

//allow any action, detailed reasoning in sudoers.d/qubes
polkit.addRule(function(action,subject) { if (subject.isInGroup("qubes")) return polkit.Result.YES; });