diff --git a/selinux-policy.spec b/selinux-policy.spec
index eb4ab0f..942675a 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit d98adbe88460ae672b4c26472f6de6729db8e680
+%global commit 2c0b0e5e22dae960f6aa3c470ab10f1692497a6c
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,8 +23,8 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.21
-Release: 2%{?dist}
+Version: 38.22
+Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -814,6 +814,20 @@ exit 0
 %endif
 
 %changelog
+* Tue Jul 25 2023 Zdenek Pytela <zpytela@redhat.com> - 38.22-1
+- Allow systemd-network-generator send system log messages
+- Dontaudit the execute permission on sock_file globally
+- Allow fsadm_t the file mounton permission
+- Allow named and ndc the io_uring sqpoll permission
+- Allow sssd io_uring sqpoll permission
+- Fix location for /run/nsd
+- Allow qemu-ga get fixed disk devices attributes
+- Update bitlbee policy
+- Label /usr/sbin/sos with sosreport_exec_t
+- Update policy for the sblim-sfcb service
+- Add the files_getattr_non_auth_dirs() interface
+- Fix the CI to work with DNF5
+
 * Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 38.21-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
 
diff --git a/sources b/sources
index 123ca9d..2a2147e 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-d98adbe.tar.gz) = d473b70985b7c160c2e93d49ba3340fe01db71970bbc2eeae801ecb8f1412248035a3449e5527c79c556854a67f52e0584c85159b5b753d93c3e92f2300f22bb
-SHA512 (container-selinux.tgz) = babfd4b589e2fdd6999ca33bfa871de6a2bae47d4098e71e1450d0ec23acf8a720347a36138adde6f7f7cf5aaa68abee5c85840b351a6752eca6d51dd539e06c
+SHA512 (selinux-policy-2c0b0e5.tar.gz) = d9c593a138f01968a023e20fe5ce945c12989ac3d4f425a2b9f3fc61673e840468fdabc2041dfbf7ace06baf30e8d22d073e53c9822a673cf8804d90a74cb7e6
+SHA512 (container-selinux.tgz) = 256c4e983f1b96ab9eedec96a946afa1dedd13fda1c9c6d69b13623f988b330d98fc8561ba7c6a9e25ab6ce41eb68682ceb1614f9cd283570f618cba3e71145a
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4