diff --git a/1005-do-not-remove-libauparse.so.0-which-is-needed-by-aud.patch b/1005-do-not-remove-libauparse.so.0-which-is-needed-by-aud.patch
new file mode 100644
index 0000000000000000000000000000000000000000..2496b8549f0ad90ebeb2e383c5147f8af1601189
--- /dev/null
+++ b/1005-do-not-remove-libauparse.so.0-which-is-needed-by-aud.patch
@@ -0,0 +1,26 @@
+From cd893dfb28ce780a6e8ae2808d27b9c4aaface9a Mon Sep 17 00:00:00 2001
+From: Chunmei Xu <xuchunmei@linux.alibaba.com>
+Date: Mon, 20 Feb 2023 14:10:15 +0800
+Subject: [PATCH] do not remove libauparse.so.0 which is needed by auditd
+
+Signed-off-by: Chunmei Xu <xuchunmei@linux.alibaba.com>
+---
+ 80-anolis/runtime-cleanup.tmpl | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/80-anolis/runtime-cleanup.tmpl b/80-anolis/runtime-cleanup.tmpl
+index 19f937b..4bb50c0 100644
+--- a/80-anolis/runtime-cleanup.tmpl
++++ b/80-anolis/runtime-cleanup.tmpl
+@@ -119,7 +119,7 @@ removefrom nm-connection-editor /usr/share/applications/*
+ removefrom atk /usr/share/locale/*
+ removefrom audit /etc/* /usr/sbin/auditctl /usr/sbin/aureport
+ removefrom audit /usr/sbin/ausearch /usr/sbin/autrace /usr/bin/*
+-removefrom audit-libs /etc/* /usr/${libdir}/libauparse*
++removefrom audit-libs /etc/*
+ removefrom bash /etc/* /usr/bin/bashbug* /usr/share/*
+ removefrom bind-utils /usr/bin/host /usr/bin/nsupdate
+ removefrom bitmap-fangsongti-fonts /usr/share/fonts/*
+-- 
+2.19.1.6.gb485710b
+
diff --git a/lorax-templates-anolis.spec b/lorax-templates-anolis.spec
index 5e8d1ed672844a892e61278966e5ba058e64379a..a7d7ecf070cbae96eaa036812a74f00cd47e7bac 100644
--- a/lorax-templates-anolis.spec
+++ b/lorax-templates-anolis.spec
@@ -1,4 +1,4 @@
-%define anolis_release 3
+%define anolis_release 4
 Name:           lorax-templates-anolis
 Version:        37.0
 Release:        1.%{anolis_release}%{?dist}
@@ -14,6 +14,7 @@ Patch1001:      1001-custom-config.patch
 Patch1002:      1002-add-uefi-parameter.patch
 Patch1003:      1003-Do-not-remove-avahi-glib-avahi-libs.patch
 Patch1004:      1004-do-not-move-usr-libexec-anaconda-auditd.patch
+Patch1005:      1005-do-not-remove-libauparse.so.0-which-is-needed-by-aud.patch
 
 # Where are these supposed to end up?
 %define templatedir %{_datadir}/lorax/templates.d/80-anolis
@@ -38,6 +39,9 @@ cp -a 80-anolis/* $RPM_BUILD_ROOT/%{templatedir}
 %{templatedir}/*
 
 %changelog
+* Mon Feb 20 2023 Chunmei Xu <xuchunmei@linux.alibaba.com> - 37.0-1.4
+- do not remove libauparse.so.0 which is needed by auditd
+
 * Mon Feb 20 2023 Chunmei Xu <xuchunmei@linux.alibaba.com> - 37.0-1.3
 - do not move usr/libexec/anaconda/auditd in runtime-postinstall.tmpl