diff --git a/config.py b/config.py
index 7220800c9..070ccbdb1 100644
--- a/config.py
+++ b/config.py
@@ -273,6 +273,10 @@ class DefaultConfig(object):
   SYSTEM_LOGS_FILE = "/var/log/syslog"
   SYSTEM_SERVICES_PATH = "conf/init/service/"
 
+  # Disallow all registry operations if unable to write to the audit log
+  # When disabled, registry pulls are allowed despite any failures to write to audit log
+  STRICT_AUDIT_LOG=true
+
   # Services that should not be shown in the logs view.
   SYSTEM_SERVICE_BLACKLIST = []