diff --git a/apparmor.d/abstractions/bus/org.freedesktop.PolicyKit1 b/apparmor.d/abstractions/bus/org.freedesktop.PolicyKit1
index 9dfab7481..2a4e8c1e5 100644
--- a/apparmor.d/abstractions/bus/org.freedesktop.PolicyKit1
+++ b/apparmor.d/abstractions/bus/org.freedesktop.PolicyKit1
@@ -2,6 +2,8 @@
 # Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
+# Can talk to polkitd's CheckAuthorization API
+
   abi <abi/4.0>,
 
   #aa:dbus common bus=system name=org.freedesktop.PolicyKit1 label="@{p_polkitd}"
@@ -13,17 +15,13 @@
 
   dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
        interface=org.freedesktop.PolicyKit1.Authority
-       member=CheckAuthorization
-       peer=(name=org.freedesktop.PolicyKit1, label="@{p_polkitd}"),
+       member={CheckAuthorization,CancelCheckAuthorization}
+       peer=(name="{@{busname},org.freedesktop.PolicyKit1}", label="@{p_polkitd}"),
 
   dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
        interface=org.freedesktop.PolicyKit1.Authority
-       member=CheckAuthorization
-       peer=(name="@{busname}", label="@{p_polkitd}"),
-  dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
-       interface=org.freedesktop.PolicyKit1.Authority
-       member=CheckAuthorization
-       peer=(name=org.freedesktop.PolicyKit1),
+       member=RegisterAuthenticationAgentWithOptions
+       peer=(name="{@{busname},org.freedesktop.PolicyKit1}", label="@{p_polkitd}"),
 
   include if exists <abstractions/bus/org.freedesktop.PolicyKit1.d>