diff --git a/sysutils/policykit/Makefile b/sysutils/policykit/Makefile
index c23dcf00668..6a3362fded1 100644
--- a/sysutils/policykit/Makefile
+++ b/sysutils/policykit/Makefile
@@ -1,9 +1,9 @@
-# $OpenBSD: Makefile,v 1.2 2009/06/07 08:11:39 ajacoutot Exp $
+# $OpenBSD: Makefile,v 1.3 2009/06/07 08:30:31 ajacoutot Exp $
 
 COMMENT=	authorization framework
 
 DISTNAME=	PolicyKit-0.9
-PKGNAME=	${DISTNAME:L}p0
+PKGNAME=	${DISTNAME:L}p1
 CATEGORIES=	sysutils security
 
 SHARED_LIBS+=	polkit-dbus	0.0 \
diff --git a/sysutils/policykit/patches/patch-data_PolicyKit_conf_in b/sysutils/policykit/patches/patch-data_PolicyKit_conf_in
new file mode 100644
index 00000000000..481bac4c6cb
--- /dev/null
+++ b/sysutils/policykit/patches/patch-data_PolicyKit_conf_in
@@ -0,0 +1,16 @@
+$OpenBSD: patch-data_PolicyKit_conf_in,v 1.1 2009/06/07 08:30:31 ajacoutot Exp $
+
+Add a default policy which allows root full control, and those in the
+wheel group to authenticate for services using their password.
+
+--- data/PolicyKit.conf.in.orig	Sun Jun  7 10:24:44 2009
++++ data/PolicyKit.conf.in	Sun Jun  7 10:27:23 2009
+@@ -6,4 +6,8 @@
+ <!-- See the manual page PolicyKit.conf(5) for file format -->
+ 
+ <config version="0.1">
++    <match user="root">
++       <return result="yes"/>
++    </match>
++    <define_admin_auth group="wheel"/>
+ </config>