diff --git a/README.md b/README.md
index d2994f8..36787fd 100644
--- a/README.md
+++ b/README.md
@@ -61,10 +61,10 @@ Clone this repo, then run the python script.
 
 ```
 cd src
-./grub-reboot-picker.py
+sudo ./grub-reboot-picker.py
 ```
 
-
+Sudo is required here because grub.cfg may not be readable (0600 permission)
 
 ## Building a distributable
 
diff --git a/com.mendhak.grubrebootpicker.desktop b/com.mendhak.grubrebootpicker.desktop
index 694d44c..a63be43 100644
--- a/com.mendhak.grubrebootpicker.desktop
+++ b/com.mendhak.grubrebootpicker.desktop
@@ -3,7 +3,7 @@ Type=Application
 Name=Grub Reboot Picker
 GenericName=Grub Reboot Picker
 Comment=Pick an OS to reboot into
-Exec=/usr/sbin/grub-reboot-picker
+Exec=pkexec /usr/sbin/grub-reboot-picker
 Terminal=false
 Icon=un-reboot
 Keywords=reboot;grub;restart;OS;windows;ubuntu;
diff --git a/com.mendhak.grubrebootpicker.policy b/com.mendhak.grubrebootpicker.policy
index bb589b6..9b9baf3 100644
--- a/com.mendhak.grubrebootpicker.policy
+++ b/com.mendhak.grubrebootpicker.policy
@@ -39,4 +39,16 @@
         <annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/shutdown</annotate>
         <annotate key="org.freedesktop.policykit.exec.allow_gui">false</annotate>
     </action>
+    <action id="org.freedesktop.policykit.pkexec.grub-reboot-picker">
+        <description>Run grub-reboot-picker</description>
+        <message>Run grub-reboot-picker so it can read grub.cfg</message>
+        <icon_name>un-reboot</icon_name>
+        <defaults>
+            <allow_any>yes</allow_any>
+            <allow_inactive>yes</allow_inactive>
+            <allow_active>yes</allow_active>
+        </defaults>
+        <annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/grub-reboot-picker</annotate>
+        <annotate key="org.freedesktop.policykit.exec.allow_gui">false</annotate>
+    </action>
 </policyconfig>
\ No newline at end of file