diff --git a/selinux-policy.spec b/selinux-policy.spec
index 11bba78..5c4f50d 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 51d529f4b8921fd25fa497e8fd5b9034cd4ef650
+%global commit d8f8145b1624f256b63d4f5e24aebe11db35dd22
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,8 +23,8 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 36.4
-Release: 2%{?dist}
+Version: 36.5
+Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -810,6 +810,22 @@ exit 0
 %endif
 
 %changelog
+* Fri Mar 18 2022 Zdenek Pytela <zpytela@redhat.com> - 36.5-1
+- Add support for nm-dispatcher console helper scripts
+- Allow nm-dispatcher plugins read its directory and sysfs
+- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
+- devices: Add a comment about cardmgr_dev_t
+- Add basic policy for BinderFS
+- Label /var/run/ecblp0 pipe with cupsd_var_run_t
+- Allow rpmdb create directory in /usr/lib/sysimage
+- Allow rngd drop privileges via setuid/setgid/setcap
+- Allow init watch and watch_reads user ttys
+- Allow systemd-logind dbus chat with sosreport
+- Allow chronyd send a message to sosreport over datagram socket
+- Remove unnecessary /etc file transitions for insights-client
+- Label all content in /var/lib/insights with insights_client_var_lib_t
+- Update insights-client policy
+
 * Wed Feb 23 2022 Zdenek Pytela <zpytela@redhat.com> - 36.4-2
 - Add insights_client module to modules-targeted-contrib.conf
 
diff --git a/sources b/sources
index ea9888c..6dc2a7f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-51d529f.tar.gz) = b46e8ee873b767ec604d9de227e39b61fcded2f67e8a00d97285297a975bebb101151205a47b95daacbf6cdada634ecd7f9183bf7d8739937762afa01ae1551a
-SHA512 (container-selinux.tgz) = 0c78514841b1aedd9000a94d230b3b535dfee36356bdff57821a5e0b983547e0c6c10b11553a460d0751b9537204fa0fedc47012c7d3b4255f367a972777eb1f
+SHA512 (selinux-policy-d8f8145.tar.gz) = 4ef12d475211c37e6e690ae4f63b465446679b6437e88f43828a3d14e01d5a6eb99c8bf77a68ace5893ee9ab4c18924808f4e42a4f4436798b7cea1abb9e0a4a
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 27372e794bb85a6fe2b88456a77e7bf7d8429877486b1c2e5e7ef6484adafdb07c54b042e9da89b85fa11b76a24c9e55cc40ce98b2af9f74fcd5c396e6438614