diff --git a/DESTDIR/var/lib/linux-infosec-setupper/audit/auditd-conf.sh b/DESTDIR/var/lib/linux-infosec-setupper/audit/auditd-conf.sh
new file mode 100644
index 0000000..5c0be20
--- /dev/null
+++ b/DESTDIR/var/lib/linux-infosec-setupper/audit/auditd-conf.sh
@@ -0,0 +1,26 @@
+# Generated by linux-infosec-setupper
+local_events="yes"
+log_file="/var/log/audit/audit.log"
+write_logs="yes"
+log_format="ENRICHED"
+log_group="root"
+priority_boost="4"
+flush="incremental_async"
+freq=""
+max_log_fileaction="rotate"
+num_logs="3"
+disp_qos="lossless"
+dispatcher=""
+distribute_network="no"
+name_format="hostname"
+name=""
+max_log_file="8"
+action_mail_acct=""
+space_left="10%"
+space_left_action="syslog"
+disk_full_action="halt"
+disk_error_action="halt"
+tcp_listen_port=""
+tcp_max_per_addr=""
+systemd_allowed_ip_list=""
+systemd_denied_ip_list=""
diff --git a/polkit/linux-infosec-setupper-auditd-gui.sh b/polkit/linux-infosec-setupper-auditd-gui.sh
new file mode 100644
index 0000000..c322b09
--- /dev/null
+++ b/polkit/linux-infosec-setupper-auditd-gui.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+pkexec /usr/sbin/linux-infosec-setupper-auditd-gui $@
diff --git a/polkit/org.nixtux.pkexec.linux-infosec-setupper-auditd-gui.policy b/polkit/org.nixtux.pkexec.linux-infosec-setupper-auditd-gui.policy
new file mode 100644
index 0000000..b6eb53c
--- /dev/null
+++ b/polkit/org.nixtux.pkexec.linux-infosec-setupper-auditd-gui.policy
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
+<policyconfig>
+
+    <vendor>NixTux</vendor>
+    <vendor_url>https://nixtux.ru</vendor_url>
+    <icon_name>security-medium</icon_name>
+    <action id="org.nixtux.pkexec.linux-infosec-setupper-auditd-gui">
+
+	<description>GUI to setup auditd</description>
+	<description xml:lang="ru">Графический инструмент для настройки аудита</description>
+	<message>Enter password to run it</message>
+	<message xml:lang="ru">Введите пароль для запуска</message>
+	<defaults>
+	<allow_any>auth_admin</allow_any>
+	<allow_inactive>auth_admin</allow_inactive>
+	<allow_active>auth_admin</allow_active>
+	</defaults>
+	<annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/linux-infosec-setupper-auditd-gui</annotate>
+	<annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
+    </action>
+</policyconfig>