diff --git a/.cockpit.metadata b/.cockpit.metadata
index bd39068..565fa3a 100644
--- a/.cockpit.metadata
+++ b/.cockpit.metadata
@@ -1 +1 @@
-0cad29037cb9fd7c87ceb09f89acbc210e9f884e SOURCES/cockpit-255.tar.xz
+7a2ebdbe91f84ae42ade76ab0a155fbd20000acc SOURCES/cockpit-257.tar.xz
diff --git a/.gitignore b/.gitignore
index c0d21f2..9a44353 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/cockpit-255.tar.xz
+SOURCES/cockpit-257.tar.xz
diff --git a/SPECS/cockpit.spec b/SPECS/cockpit.spec
index c9043db..cfcdca6 100644
--- a/SPECS/cockpit.spec
+++ b/SPECS/cockpit.spec
@@ -1,5 +1,5 @@
 # This spec file has been automatically updated
-Version:        255
+Version:        257
 Release: 1%{?dist}
 #
 # Copyright (C) 2014-2020 Red Hat, Inc.
@@ -81,8 +81,8 @@ Source0:        https://github.com/cockpit-project/cockpit/releases/download/%{v
 %define build_optional 1
 %endif
 
-# Ship custom SELinux policy only in Fedora and RHEL-9 onward
-%if 0%{?rhel} >= 9 || 0%{?fedora}
+# Ship custom SELinux policy (but not for cockpit-appstream)
+%if "%{name}" == "cockpit"
 %define selinuxtype targeted
 %define with_selinux 1
 %define selinux_policy_version %(rpm --quiet -q selinux-policy && rpm -q --queryformat "%{V}-%{R}" selinux-policy || echo 1)
@@ -714,6 +714,11 @@ via PackageKit.
 
 # The changelog is automatically generated and merged
 %changelog
+* Wed Nov 10 2021 Katerina Koukiou <kkoukiou@redhat.com> - 257-1
+- Support for reading TLS certificates with any permissions
+- cockpit-ws no longer supports merged certificates
+- Services: Show user-owned systemd units (rhbz#1792270)
+
 * Thu Oct 14 2021 Martin Pitt <mpitt@redhat.com> - 255-1
 - Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
 - kdump: Show "Directory" field for NFS mounts (rbhz#2004041)