diff --git a/packstack/puppet/templates/prescript.pp b/packstack/puppet/templates/prescript.pp
index f68589e95..19f1eb279 100644
--- a/packstack/puppet/templates/prescript.pp
+++ b/packstack/puppet/templates/prescript.pp
@@ -26,3 +26,12 @@ service { "firewalld":
   enable => false,
   before => Class['firewall'],
 }
+
+package { 'audit':
+  ensure => present,
+} ->
+service { 'auditd':
+  ensure => running,
+  enable => true,
+}
+