diff --git a/ChangeLog b/ChangeLog
index b1c45ec4c8..0f2d2ad6e0 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+Thu May  8 07:51:11 EST 2008 Daniel P. Berrange <berrange@redhat.com>
+
+	* src/auth.html.in, src/auth.html: Fix policykit config docs
+	(Cole Robinson)
+
 Wed May  7 14:49:11 EST 2008 Daniel P. Berrange <berrange@redhat.com>
 
 	* src/xend_internal.c, src/xml.c: Disable certain sound functions
diff --git a/docs/auth.html b/docs/auth.html
index e63e90aab2..3f74df206b 100644
--- a/docs/auth.html
+++ b/docs/auth.html
@@ -186,11 +186,15 @@ while requiring <code>joe</code> to authenticate with the admin password,
 would require adding the following snippet to <code>PolicyKit.conf</code>.
 </p>
         <pre>
-  &lt;match action="org.libvirt.unix.manage" user="fred"&gt;
-    &lt;return result="yes"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="fred"&gt;
+      &lt;return result="yes"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
-  &lt;match action="org.libvirt.unix.manage" user="joe"&gt;
-    &lt;return result="auth_admin"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="joe"&gt;
+      &lt;return result="auth_admin"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
 </pre>
         <h3>
diff --git a/docs/auth.html.in b/docs/auth.html.in
index 73403604c0..04b1210689 100644
--- a/docs/auth.html.in
+++ b/docs/auth.html.in
@@ -77,11 +77,15 @@ while requiring <code>joe</code> to authenticate with the admin password,
 would require adding the following snippet to <code>PolicyKit.conf</code>.
 </p>
     <pre>
-  &lt;match action="org.libvirt.unix.manage" user="fred"&gt;
-    &lt;return result="yes"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="fred"&gt;
+      &lt;return result="yes"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
-  &lt;match action="org.libvirt.unix.manage" user="joe"&gt;
-    &lt;return result="auth_admin"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="joe"&gt;
+      &lt;return result="auth_admin"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
 </pre>
     <h3><a name="ACL_server_username">Username/password auth</a></h3>