diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-process/audit b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-process/audit
new file mode 100644
index 0000000000..dc9b3ac4bf
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/sys-process/audit
@@ -0,0 +1,11 @@
+# Do not install Gentoo-provided audit rules, we will install our own
+# in coreos-base/misc-files.
+INSTALL_MASK+="
+/etc/audit/audit.rules*
+"
+
+# Do not install legacy initscripts stuff
+INSTALL_MASK+="
+/usr/libexec/audit-functions
+/usr/libexec/initscripts
+"