diff --git a/malcontent.changes b/malcontent.changes
index f50e6a4..f6b9108 100644
--- a/malcontent.changes
+++ b/malcontent.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Wed Nov 18 11:09:13 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Don't actually install com.endlessm.ParentalControls.rules: this
+  just grants 'wheel'-group members access without password; as
+  openSUSE does not support 'wheel' by default, we only ship the
+  file as sample file (boo#1177974#c8).
+
 -------------------------------------------------------------------
 Sat Oct 31 11:25:34 UTC 2020 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/malcontent.spec b/malcontent.spec
index d2e98ec..e1d1952 100644
--- a/malcontent.spec
+++ b/malcontent.spec
@@ -99,6 +99,9 @@ accounts to inappropriate content.
 
 %install
 %meson_install
+# com.endlessm.ParentalControls.rules would allow 'wheel' group users access without polkit auth
+# wheel is not used in openSUSE, so we simply package this file as an example %%doc file
+mv %{buildroot}%{_datadir}/polkit-1/rules.d/com.endlessm.ParentalControls.rules .
 %find_lang %{name}
 
 %post  -n libmalcontent-0-0 -p /sbin/ldconfig
@@ -109,6 +112,7 @@ accounts to inappropriate content.
 %files
 %license COPYING
 %doc NEWS README.md
+%doc com.endlessm.ParentalControls.rules
 /%{_lib}/security/pam_malcontent.so
 %{_bindir}/malcontent-client
 %{_bindir}/malcontent-control
@@ -122,7 +126,6 @@ accounts to inappropriate content.
 %{_datadir}/accountsservice/interfaces/com.endlessm.ParentalControl*
 %{_datadir}/polkit-1/actions/com.endlessm.ParentalControls.policy
 %{_datadir}/polkit-1/actions/org.freedesktop.MalcontentControl.policy
-%{_datadir}/polkit-1/rules.d/com.endlessm.ParentalControls.rules
 
 %files lang -f %{name}.lang