diff --git a/.gitignore b/.gitignore
index 20be205..f6651fd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -308,3 +308,5 @@ serefpolicy*
 /selinux-policy-contrib-a342008.tar.gz
 /selinux-policy-contrib-5ed2192.tar.gz
 /selinux-policy-38c6414.tar.gz
+/selinux-policy-contrib-dab4b50.tar.gz
+/selinux-policy-446ee2a.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index ade0180..0fb4b17 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 9c42b2893707c6a5a694c25b03ffafc951305575
+%global commit0 446ee2abb3b37bb0fe27fa313048069d3c83b0e7
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -709,6 +709,9 @@ exit 0
 %endif
 
 %changelog
+* Mon Sep 24 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-4
+- Update sources to include SELinux policy for containers
+
 * Thu Sep 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-3
 - Allow certmonger to manage cockpit_var_run_t pid files
 - Allow cockpit_ws_t domain to manage cockpit services
diff --git a/sources b/sources
index f4dfb65..4d630e5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-9c42b28.tar.gz) = 6fe28d188723b1b6881fc3debdba5f577ca7292fd5dc49331267d979ec9b2d5c127093e59eda02894016b7d5f9e5acd971baf158d409dd71efc2907a538792d4
 SHA512 (selinux-policy-contrib-dab4b50.tar.gz) = f75ccf7d02520c85ca80f80b00101713689595e82765605c6a3a33e6c6488fd04885b06ff36d50f88741182b8d010e5157133ff9a5679fc1a45bbd09b461859b
-SHA512 (container-selinux.tgz) = c104778b2744fdcf42ec8c8e98c846d9db103f7b320ab4e13c26d6b3fd25da2fba3ee94d00e3b638687be5f98d31fddd5906c87928be9ad8d667b41c0f100ecc
+SHA512 (selinux-policy-446ee2a.tar.gz) = a460286e138f0424cb2da998d72fa7f332f92713604d5d17aa55da79620591ccf857b9682984cc3b4a9965ad7178269ebadb512979d5c86d6ef288a7811c3d09
+SHA512 (container-selinux.tgz) = 56596d0044897ad64722f8fb5fffb8d308d257384e64c1da0fdb1856bc8de2550fdca39f49fcd086ea95a4a1504d252e0f697530452c67abde864a2606967b2e