diff --git a/modules/security/policykit.nix b/modules/security/policykit.nix
index a095270dc39..e8cdecd0e9a 100644
--- a/modules/security/policykit.nix
+++ b/modules/security/policykit.nix
@@ -2,6 +2,21 @@
 
 with pkgs.lib;
 
+let
+
+  conf = pkgs.writeText "PolicyKit.conf"
+    ''
+      <?xml version="1.0" encoding="UTF-8"?>
+
+      <!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
+        "http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">
+
+      <config version="0.1">
+      </config>
+    '';
+
+in
+
 {
 
   config = {
@@ -23,6 +38,11 @@ with pkgs.lib;
         gid = config.ids.gids.polkituser;
       };
 
+    environment.etc = singleton
+      { source = conf;
+        target = "PolicyKit/PolicyKit.conf";
+      };
+
     system.activationScripts.policyKit = fullDepEntry
       ''
         mkdir -m 0770 -p /var/run/PolicyKit