diff --git a/.gitignore b/.gitignore
index 9f69b6a..8df70ef 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-de5ea82.tar.gz
+SOURCES/selinux-policy-90056bd.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index 923c484..f7fbe59 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,2 +1,2 @@
-f4084f87f301c662b3c7f0937a96e5addb89fb01 SOURCES/container-selinux.tgz
-1e340f4b3ef619edab09b10372f635b55c049933 SOURCES/selinux-policy-de5ea82.tar.gz
+35ef0a7704f2117b6bd41a80f37e668bf6776be2 SOURCES/container-selinux.tgz
+0f2be67fbd8c14cd160e05205ebfd8bf3546dd03 SOURCES/selinux-policy-90056bd.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index 996aa9e..acbf4ff 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit de5ea8200829c50379eb2242ae9866748409551a
+%global commit 90056bdde4963bc8df7d8a936a22efff139a2367
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 38.1.11
-Release: 2%{?dist}.3
+Release: 2%{?dist}.4
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -809,6 +809,18 @@ exit 0
 %endif
 
 %changelog
+* Wed Aug 23 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-2.4
+- Allow firewalld rw ica_tmpfs_t files
+Resolves: rhbz#2233535
+- Allow systemd-timedated watch init runtime dir
+Resolves: rhbz#2232637
+- Boolean: Allow virt_qemu_ga create ssh directory
+Resolves: rhbz#2226685
+- Allow virt_qemu_ga_t create .ssh dir with correct label
+Resolves: rhbz#2226685
+- Label only /usr/sbin/ripd and ripngd with zebra_exec_t
+Resolves: rhbz#2229992
+
 * Mon Jun 05 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-2.3
 - Allow insights-client get quotas of all filesystems
 Resolves: rhbz#2203797