diff --git a/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules
new file mode 100644
index 0000000..edc276b
--- /dev/null
+++ b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules
@@ -0,0 +1,12 @@
+// ABOUTME: Allow the greeter user to reboot and power off without authentication.
+// ABOUTME: Required because greetd's greeter session is inactive in logind.
+
+polkit.addRule(function(action, subject) {
+    if (subject.user === "greeter" &&
+        (action.id === "org.freedesktop.login1.reboot" ||
+         action.id === "org.freedesktop.login1.reboot-multiple-sessions" ||
+         action.id === "org.freedesktop.login1.power-off" ||
+         action.id === "org.freedesktop.login1.power-off-multiple-sessions")) {
+        return polkit.Result.YES;
+    }
+});