Add more comments to example files.

Add a MESSAGE to explain how to disable polkit.

sysutils/polkit/files/10-desktop-policy.pkla

@@ -1,3 +1,12 @@
+# Authorizations/policy for the wheel and users groups.
+#
+# See the pklocalauthority(8) man page for more information
+# about configuring the Local Authority.
+#
+
+# Allow "standard users" to do some things without being interrupted by
+# password dialogs
+#
 [Desktop User Permissions]
 Identity=unix-group:users
 Action=org.gnome.clockapplet.mechanism.settimezone
@@ -5,6 +14,9 @@ ResultAny=no
 ResultInactive=no
 ResultActive=yes
 
+# Allow "administrative users" to do a lot of things without being
+# interrupted by password dialogs
+#
 [Desktop Administrator Permissions]
 Identity=unix-group:wheel
 Action=org.gnome.clockapplet.mechanism.*;org.freedesktop.devicekit.disks.*;org.freedesktop.RealtimeKit1.*

sysutils/polkit/files/60-desktop-policy.conf

@@ -1,2 +1,10 @@
+# This allows users in the wheel group to authenticate as the
+# administrator (already the default under OpenBSD as configured in
+# 50-localauthority.conf).
+#
+# See the pklocalauthority(8) man page for more information
+# about configuring the Local Authority.
+#
+
 [Configuration]
 AdminIdentities=unix-group:wheel

sysutils/polkit/patches/patch-src_nullbackend_50-nullbackend_conf

@@ -0,0 +1,16 @@
+$OpenBSD: patch-src_nullbackend_50-nullbackend_conf,v 1.1 2010/07/05 15:22:16 ajacoutot Exp $
+--- src/nullbackend/50-nullbackend.conf.orig	Mon Jul  5 16:51:53 2010
++++ src/nullbackend/50-nullbackend.conf	Mon Jul  5 16:52:17 2010
+@@ -1,10 +1,10 @@
+ #
+ # Configuration file for the PolicyKit null backend.
+ #
+-# DO NOT EDIT THIS FILE, it will be overwritten on update.
++# DO NOT EDIT THIS FILE
+ #
+ # To change configuration, create another file in this directory with
+-# a filename that is sorted after the 50-nullback.conf and make
++# a filename that is sorted after the 50-nullbackend.conf and make
+ # sure it has the .conf extension.
+ #
+ # Only a single configuration item, Priority, is supported.

sysutils/polkit/patches/patch-src_polkitbackend_50-localauthority_conf

@@ -0,0 +1,11 @@
+$OpenBSD: patch-src_polkitbackend_50-localauthority_conf,v 1.1 2010/07/05 15:22:16 ajacoutot Exp $
+--- src/polkitbackend/50-localauthority.conf.orig	Mon Jul  5 16:52:24 2010
++++ src/polkitbackend/50-localauthority.conf	Mon Jul  5 16:52:30 2010
+@@ -1,6 +1,6 @@
+ # Configuration file for the PolicyKit Local Authority.
+ #
+-# DO NOT EDIT THIS FILE, it will be overwritten on update.
++# DO NOT EDIT THIS FILE
+ #
+ # See the pklocalauthority(8) man page for more information
+ # about configuring the Local Authority.

sysutils/polkit/pkg/MESSAGE

@@ -0,0 +1,6 @@
+polkitd(8) runs setuid(2) root. If you'd like to completely disable
+priviledges granting through the PolicyKit framework, create the file:
+    ${SYSCONFDIR}/polkit-1/nullbackend.conf.d/99-nullbackend.conf
+containing the following lines:
+[Configuration]
+Priority=99