---

root@astra-67272:/home/administrator# cat /usr/share/polkit-1/actions/local.pkexec.synaptic.policy 
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
<policyconfig>
  <action id="local.pkexec.synaptic">
    <description>Run Synaptic Package Manager</description>
    <message>Authentication is required to run Synaptic</message>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/synaptic</annotate>
    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
  </action>
</policyconfig>
root@astra-67272:/home/administrator# cat /etc/polkit-1/rules.d/50-synaptic.rules 
polkit.addRule(function(action, subject) {
    if (action.id == "local.pkexec.synaptic" &&
        subject.isInGroup("synaptic-users") &&
        subject.local && subject.active) {
        return polkit.Result.YES;
    }
});
root@astra-67272:/home/administrator#