diff --git a/audit.spec b/audit.spec
index 5541bf8753fb048a4c86847b43d45c9e64243249..36b7ebec244700096733d8eba21c7c2888b6e610 100644
--- a/audit.spec
+++ b/audit.spec
@@ -1,12 +1,10 @@
 %{!?python_sitearch: %define python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
 
-%define enable_audit 0
-
 Summary:            User space tools for kernel auditing
 Name:               audit
 Epoch:              1
 Version:            3.0
-Release:            4
+Release:            5
 License:            GPLv2+ and LGPLv2+
 URL:                https://people.redhat.com/sgrubb/audit/
 Source0:            https://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
@@ -205,9 +203,7 @@ if [ -d "/etc/audisp/" ];then
     fi
 fi
 
-%if %{enable_audit}
 %systemd_post auditd.service
-%endif
 
 %post -n audispd-plugins
 # after installing audispd-plugins
@@ -278,11 +274,9 @@ fi
 
 %postun
 /sbin/ldconfig
-%if %{enable_audit}
 if [ $1 -ge 1 ]; then
    /sbin/service auditd condrestart > /dev/null 2>&1 || :
 fi
-%endif
 
 %files
 %doc README
@@ -374,6 +368,9 @@ fi
 %attr(644,root,root) %{_mandir}/man8/*.8.gz
 
 %changelog
+* Fri Jul 30 2021 yixiangzhike <zhangxingliang3@huawei.com> - 3.0-5
+- Revert "keep auditd off by default"
+
 * Thu Jul 22 2021 yixiangzhike <zhangxingliang3@huawei.com> - 3.0-4
 - keep auditd off by default