diff --git a/updates.txt b/updates.txt
index eaaf59d5..b0816761 100644
--- a/updates.txt
+++ b/updates.txt
@@ -47,6 +47,15 @@ doas ln -s /etc/runit/sv/auditd /run/runit/service/
 
 doas sv start auditd
 
+Create an audit group, add $USER to it, and add audit group to /etc/audit/auditd.conf:
+
+doas groupadd -r audit
+doas gpasswd -a $USER audit
+
+/etc/audit/auditd.conf
+
+log_group = audit
+
 In /etc/rc/apparmor.conf, uncomment enforce mode
 
 In /etc/default/grub, rewrite the line at CMDLINE as such (be exact and careful here):