diff --git a/fedora-release.spec b/fedora-release.spec
index 4462127..9010a5c 100644
--- a/fedora-release.spec
+++ b/fedora-release.spec
@@ -9,7 +9,7 @@
 Summary:        Fedora release files
 Name:           fedora-release
 Version:        28
-Release:        0.3
+Release:        0.4
 License:        MIT
 Group:          System Environment/Base
 URL:            https://pagure.io/fedora-release
@@ -214,6 +214,8 @@ install -m 0644 80-workstation.preset $RPM_BUILD_ROOT%{_prefix}/lib/os.release.d
 # Override the list of enabled gnome-shell extensions for Workstation
 mkdir -p $RPM_BUILD_ROOT%{_datadir}/glib-2.0/schemas/
 install -m 0644 org.gnome.shell.gschema.override $RPM_BUILD_ROOT%{_datadir}/glib-2.0/schemas/
+mkdir -p $RPM_BUILD_ROOT%{_datadir}/polkit-1/rules.d/
+install -m 0644 org.projectatomic.rpmostree1.rules $RPM_BUILD_ROOT%{_datadir}/polkit-1/rules.d/
 
 # Copy the make_edition script to /usr/sbin
 mkdir -p $RPM_BUILD_ROOT/%{_prefix}/sbin/
@@ -340,11 +342,15 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 %{_datadir}/glib-2.0/schemas/org.gnome.shell.gschema.override
 %ghost %{_prefix}/lib/systemd/system-preset/80-workstation.preset
 %attr(0644,root,root) /usr/lib/os.release.d/presets/80-workstation.preset
+%attr(0644,root,root) /usr/share/polkit-1/rules.d/org.projectatomic.rpmostree1.rules
 
 %files -n convert-to-edition
 /usr/sbin/convert-to-edition
 
 %changelog
+* Thu Feb 22 2018 Matthias Clasen <mclasen@redhat.com> - 28-0.4
+- Add polkit rules to let gnome-software update Atomic Workstation
+
 * Sat Feb 17 2018 Mohan Boddu <mboddu@redhat.com> - 28-0.3
 - Update for branching
 - Enable akmods.service in presets
diff --git a/sources b/sources
index 9a034fe..0a1565b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (fedora-release-28.tar.bz2) = 86e5cc6a69f3d0006521bc6e431a5b9720bc9b64f0257c1f61c938c34e846362bd7d803f6636fd22a1e0f5d8b202c1ce9c5fc9d88e188fcb07da6873b216dfb8
+SHA512 (fedora-release-28.tar.bz2) = f033535b5d057db179d58f5f15922bbb1a87d53d95e161264097cd90bfa2e91d2004845eafd52ad0bb358d9678dd03a8c2f3b34e09bba592154c601da5d27dfe