diff --git a/CHANGELOG b/CHANGELOG
index 3a5a93214c..c079ff757f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -8,6 +8,7 @@ git-annex (7.20190913) UNRELEASED; urgency=medium
   * Close sqlite databases more robustly.
   * adjust --lock: This enters an adjusted branch where files are locked.
   * remotedaemon: Don't list --stop in help since it's not supported.
+  * enable-tor: Run kdesu with -c option.
 
  -- Joey Hess <id@joeyh.name>  Thu, 19 Sep 2019 11:11:19 -0400
 
diff --git a/Utility/Su.hs b/Utility/Su.hs
index a0500e4837..9d26aac09a 100644
--- a/Utility/Su.hs
+++ b/Utility/Su.hs
@@ -76,7 +76,7 @@ mkSuCommand cmd ps = firstM (\(SuCommand _ p _) -> inPath p) =<< selectcmds
 		[ SuCommand (MayPromptPassword SomePassword) "gksu"
 			[Param shellcmd]
 		, SuCommand (MayPromptPassword SomePassword) "kdesu"
-			[Param shellcmd]
+			[Param "-c", Param shellcmd]
 		-- Available in Debian's menu package; knows about lots of
 		-- ways to gain root.
 		, SuCommand (MayPromptPassword SomePassword) "su-to-root"
diff --git a/doc/bugs/enable-tor_fails_with_quoting_issue.mdwn b/doc/bugs/enable-tor_fails_with_quoting_issue.mdwn
index 363a867dd2..41a6cb6b55 100644
--- a/doc/bugs/enable-tor_fails_with_quoting_issue.mdwn
+++ b/doc/bugs/enable-tor_fails_with_quoting_issue.mdwn
@@ -78,3 +78,6 @@ $ xxd /proc/21584/cmdline
 ### Have you had any luck using git-annex before? (Sometimes we get tired of reading bug reports all day and a lil' positive end note does wonders)
 
 Yes, lots and lots for many years :-)
+
+> turns out kdesu needs -c in order to treat the single parameter that is
+> passed to it as a command line. [[fixed|done]] --[[Joey]]