diff --git a/selinux-policy.spec b/selinux-policy.spec
index aba5e80..cd8a8b0 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e3da92314ccfcc7b263aa44d0c9f824703df197c
+%global commit d552a9bea539b67ebe404601074887a8c48a3f3b
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.8
-Release: 6%{?dist}
+Release: 7%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -796,6 +796,17 @@ exit 0
 %endif
 
 %changelog
+* Fri Mar 19 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-7
+- Allow xdm_t watch systemd-logind session dirs
+- Allow xdm_t transition to system_dbusd_t
+- Allow confined users login into graphic session
+- Allow login_userdomain watch systemd login session dirs
+- install_t: Allow NoNewPriv transition from systemd
+- Remove setuid/setgid capabilities from mysqld_t
+- Add context for new mariadbd executable files
+- Allow netutils_t create netlink generic socket
+- Allow systemd the audit_control capability conditionally
+
 * Thu Mar 11 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-6
 - Allow polkit-agent-helper-1 read logind sessions files
 - Allow polkit-agent-helper read init state
diff --git a/sources b/sources
index 2101f15..fda64a0 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-e3da923.tar.gz) = d3963ff469fc1dd8d5fb525cc78276109a1220fe528839549c74a1d9676d0fe481926718a40c1bf0062b6823730200a2d69141c8ece3c07ed1f9e12d2b4a2fb7
-SHA512 (container-selinux.tgz) = 2256f3e211e3268c3912b22ab4754828fb7b58d1241c7b406e213dd9f79cf37fbd6b526101a5722c36a56b592bedcba4f3eda1cb5ac5a2b65804f527c8b7769e
+SHA512 (selinux-policy-d552a9b.tar.gz) = 0209126192da510aca892778d55e3f8f7b51e94c7f574beb2fca6d98707cd474cc98499664e92139fec455b211f613454b8b37d2a6c2694c3aef0f18bcb434cc
+SHA512 (container-selinux.tgz) = 0e4d2aea5a826cc1774923fa7a3fa359178d5dc858ddec4df26d6d4881bc2bb92d95a30e6b9a747407d815be330e0d12cfa4b2396c0b63bae47efc7a1069c0d6
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4