diff --git a/debian/changelog b/debian/changelog
index 138930ae..5bbe7fc3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+livecd-rootfs (2.188) UNRELEASED; urgency=low
+
+  * ship policykit rules for networkmanager, now that we use it on touch
+
+ -- Oliver Grawert <ogra@ubuntu.com>  Sat, 21 Sep 2013 12:54:02 +0200
+
 livecd-rootfs (2.187) saucy; urgency=low
 
   * Removing QPA_PLATFORM_PLUGIN as it is now handled in their proper
diff --git a/live-build/ubuntu-touch/hooks/45-add-sudo-group-nm.chroot b/live-build/ubuntu-touch/hooks/45-add-sudo-group-nm.chroot
index e8779bfe..66d45396 100755
--- a/live-build/ubuntu-touch/hooks/45-add-sudo-group-nm.chroot
+++ b/live-build/ubuntu-touch/hooks/45-add-sudo-group-nm.chroot
@@ -4,3 +4,12 @@ echo "Adding admin group policy to NM system service"
 
 sed -i 's/<policy user="root">/<policy group="sudo">\n\t\t\t\t<allow send_destination="org.freedesktop.NetworkManager"\/>\n\t\t\t\t<allow send_interface="org.freedesktop.NetworkManager"\/>\n\t\t\t\t<allow send_interface="org.freedesktop.NetworkManager.SecretAgent"\/>\n\t\t<\/policy>\n\t\t<policy user="root">/g' /etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf
 
+mkdir -p /etc/polkit-1/localauthority/50-local.d
+cat > /etc/polkit-1/localauthority/50-local.d/org.freedesktop.NetworkManager.pkla << EOF
+[indicator-network-service]
+Identity=unix-group:sudo
+Action=org.freedesktop.NetworkManager.*
+ResultAny=yes
+ResultInactive=no
+ResultActive=yes
+EOF