diff --git a/audit-3.0.5.tar.gz b/audit-3.0.5.tar.gz
deleted file mode 100644
index f64209c..0000000
--- a/audit-3.0.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7c54e73a6cafc8154ee6e37971efb1c8dd9ac2361daec429a52a7538c24fdc70
-size 1188884
diff --git a/audit-3.0.6.tar.gz b/audit-3.0.6.tar.gz
new file mode 100644
index 0000000..9d3e3a5
--- /dev/null
+++ b/audit-3.0.6.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c3e44d77513a42401d417dd0ceb203cf23886cb89402dea7b9494faa3f4fcc5e
+size 1190011
diff --git a/audit-secondary.changes b/audit-secondary.changes
index 6583e3f..ff908f7 100644
--- a/audit-secondary.changes
+++ b/audit-secondary.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Sun Nov  7 13:34:20 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
+
+- Update to version 3.0.6:
+  * fixes a segfault on some SELINUX_ERR records
+  * makes IPX packet interpretation dependent on the ipx header
+    file existing
+  * adds b32/b64 support to ausyscall
+  * adds support for armv8l
+  * fixes auditctl list of syscalls on PPC
+  * auditd.service now restarts auditd under some conditions
+
 -------------------------------------------------------------------
 Fri Oct 15 11:13:26 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
 
diff --git a/audit-secondary.spec b/audit-secondary.spec
index 5e4c6d7..eaaabb1 100644
--- a/audit-secondary.spec
+++ b/audit-secondary.spec
@@ -22,7 +22,7 @@
 # The seperation is required to minimize unnecessary build cycles.
 %define 	_name audit
 Name:           audit-secondary
-Version:        3.0.5
+Version:        3.0.6
 Release:        0
 Summary:        Linux kernel audit subsystem utilities
 License:        GPL-2.0-or-later
diff --git a/audit.changes b/audit.changes
index c8db949..fefab1d 100644
--- a/audit.changes
+++ b/audit.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Sun Nov  7 13:34:20 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
+
+- Update to version 3.0.6:
+  * fixes a segfault on some SELINUX_ERR records
+  * makes IPX packet interpretation dependent on the ipx header
+    file existing
+  * adds b32/b64 support to ausyscall
+  * adds support for armv8l
+  * fixes auditctl list of syscalls on PPC
+  * auditd.service now restarts auditd under some conditions
+
 -------------------------------------------------------------------
 Thu Sep 16 03:46:19 UTC 2021 - Enzo Matsumiya <ematsumiya@suse.com>
 
diff --git a/audit.spec b/audit.spec
index d1972f7..4f7a1a5 100644
--- a/audit.spec
+++ b/audit.spec
@@ -17,7 +17,7 @@
 
 
 Name:           audit
-Version:        3.0.5
+Version:        3.0.6
 Release:        0
 Summary:        Linux kernel audit subsystem utilities
 License:        GPL-2.0-or-later
diff --git a/enable-stop-rules.patch b/enable-stop-rules.patch
index 7e0ea7e..ffa2445 100644
--- a/enable-stop-rules.patch
+++ b/enable-stop-rules.patch
@@ -19,6 +19,6 @@ Signed-off-by: Enzo Matsumiya <ematsumiya@suse.de>
  # the next line after copying the file to /etc/systemd/system/auditd.service
 -#ExecStopPost=/sbin/auditctl -R /etc/audit/audit-stop.rules
 +ExecStopPost=/sbin/auditctl -R /etc/audit/audit-stop.rules
- 
- ### Security Settings ###
- MemoryDenyWriteExecute=true
+ Restart=on-failure
+ # Do not restart for intentional exits. See EXIT CODES section in auditd(8).
+ RestartPreventExitStatus=2 4 6