diff --git a/selinux-policy.spec b/selinux-policy.spec
index 8205519..3c1bbf1 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e1e1381cb68157a427405fcef50fd081ba1aae4d
+%global commit bc7eb6f794d670d25b569571042eae390cbc7617
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.5
+Version: 34.6
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -796,6 +796,17 @@ exit 0
 %endif
 
 %changelog
+* Fri May 07 2021 Zdenek Pytela <zpytela@redhat.com> - 34.6-1
+- Make domains use kernel_write_perf_event() and kernel_manage_perf_event()
+- Add kernel_write_perf_event() and kernel_manage_perf_event()
+- Allow syslogd_t watch root and var directories
+- Allow unconfined_t read other processes perf_event records
+- Allow login_userdomain read and map /var/lib/systemd files
+- Allow NetworkManager watch its config dir
+- Allow NetworkManager read and write z90crypt device
+- Allow tgtd create and use rdma socket
+- Allow aide connect to init with a unix socket
+
 * Tue May 04 2021 Zdenek Pytela <zpytela@redhat.com> - 34.5-1
 - Grant execmem to varnishlog_t
 - We no longer need signull for varnishlog_t
diff --git a/sources b/sources
index 614967e..0b8827f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-e1e1381.tar.gz) = 431972ca6d63c4b59cd0a0f21f2e88ca2fe14cef7a11a2aee819c81afff5323ac96ace779a7e61f811c5aec840bdda68ae0a80c887074a982bdc647d713474f6
-SHA512 (container-selinux.tgz) = 656e5f112f5e6e2cb66bf39fa4d3fddc865a90afc6432fbb8eaf39f1ca6bb3510b676e340927db3d7777acac7ebea4238609f49da79843807046443f60f3f7bc
+SHA512 (selinux-policy-bc7eb6f.tar.gz) = ad49b941b73ff438456e1bd3197a223ad6592d26b2dd00c7c117f80d4af9e80b1fde2ed6b85bd69e31d30d4e566eefc9cf831b5f66f70b499c82dd938eb5a8fc
+SHA512 (container-selinux.tgz) = 0975e9b14f89b290aa2a8c3836c50a58d88da5a368653ceabbdbc83f475916f3ec34268d02052f973d5a9395070e1316ecaea41a4f9622ae87e5a748632aad6b
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4