diff --git a/.gitignore b/.gitignore
index 19e606e..daf156f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -289,3 +289,4 @@ serefpolicy*
 /selinux-policy-a1ec13e.tar.gz
 /selinux-policy-contrib-93edf9a.tar.gz
 /selinux-policy-d06c960.tar.gz
+/selinux-policy-contrib-f1b2ca4.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 671d5ff..56283d4 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 93edf9a38fec7dac9845cb7d5630b4ae931e36f7
+%global commit1 f1b2ca4356336a0f8c018fb0d2a811df81f32467
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.2
-Release: 22%{?dist}
+Release: 23%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -718,6 +718,9 @@ exit 0
 %endif
 
 %changelog
+* Wed Jun 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-23
+- Add dac_override capability to sendmail_t domian
+
 * Wed Jun 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-22
 - Fix typo in authconfig policy
 - Update ctdb domain to support gNFS setup
diff --git a/sources b/sources
index db51a23..0386654 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-contrib-93edf9a.tar.gz) = dcbcbe679f779d594625ba1e25ae346e6854274ee4ca297f2e94b216352b054bcd98364792f048f638f38abc4e436bf400e38d634a43dc322f5c65129e18a782
 SHA512 (selinux-policy-d06c960.tar.gz) = 80671384c85c91b920ad792b290843986b5ba495416de49cf94535bdba28b3dfe237a925116767dd7e781f76df44168788217169f03648ea82f37aa586395a38
-SHA512 (container-selinux.tgz) = f841e4e02294f0c12bbb81bc463ba8129154f5fdb18b9ad7fe254e86b6668dca069991dd3c3b3b8a20ef072fcd018750fbf8f5399a1a221b427bd92268d0b243
+SHA512 (selinux-policy-contrib-f1b2ca4.tar.gz) = 9908062364aef17c6ebabfecbef6a5df0142f7f13d7a268169498fc59b965f955996f11d5c13b23df7bad59b80a13c707a9854cfa2049e0ae1a756c6f31e3a2b
+SHA512 (container-selinux.tgz) = a974188befc2c380af4272bb2a024703fc9917487067caa6e121f884a5534138e9d87ec115d91605e571a1d6c14cbb4aeda43ef86eddbf8bcea4671903c0916a