diff --git a/.gitignore b/.gitignore
index 62c9259..032d3b2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-1f00e99.tar.gz
+SOURCES/selinux-policy-f8603bf.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index 44afbcd..31d3b5f 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,2 +1,2 @@
-368f36667704ff6a973907b58587b162d73ff713 SOURCES/container-selinux.tgz
-89abf7c3517c16b3d7ad3b54b1ddcca331180be7 SOURCES/selinux-policy-1f00e99.tar.gz
+ecbdf855821611f11af9ed0b83de3b8885476b4e SOURCES/container-selinux.tgz
+e8b2b88e89a8a8b4eea4876e5787267d31f51964 SOURCES/selinux-policy-f8603bf.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index dcaa526..3d5ef0b 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 1f00e9902fc460b1b1eedb5fbb182bdff6924e33
+%global commit f8603bf025badb70f5a87d6d5687516c5ee0669d
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 38.1.11
-Release: 2%{?dist}
+Release: 2%{?dist}.2
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -809,9 +809,17 @@ exit 0
 %endif
 
 %changelog
-* Tue Mar 28 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-2
+* Mon Apr 24 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-2.2
 - rebuilt
-Resolves: rhbz#2172268
+Resolves: rhbz#2188391
+
+* Mon Apr 24 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1.1
+- Allow dmidecode write to cloud-init tmp files
+Resolves: rhbz#2188391
+- Allow chronyd send a message to cloud-init over a datagram socket
+Resolves: rhbz#2188391
+- Allow cloud-init domain transition to insights-client domain
+Resolves: rhbz#2188391
 
 * Mon Mar 27 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
 - Allow passt manage qemu pid sock files