diff --git a/selinux-policy.spec b/selinux-policy.spec
index eef84df..6d53070 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit c05289b0d8ff717db3a9f5b9ca249c180f8fd7fc
+%global commit 84d400b50cd328c24885b6579ee32c729092ddb8
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.7
+Version: 34.8
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -796,6 +796,16 @@ exit 0
 %endif
 
 %changelog
+* Thu May 20 2021 Zdenek Pytela <zpytela@redhat.com> - 34.8-1
+- Allow local_login_t nnp_transition to login_userdomain
+- Allow asterisk watch localization symlinks
+- Allow NetworkManager_t to watch /etc
+- Label /var/lib/kdump with kdump_var_lib_t
+- Allow amanda get attributes of cgroup filesystems
+- Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
+- Allow install_t nnp_domtrans to setfiles_mac_t
+- Allow fcoemon create sysfs files
+
 * Thu May 13 2021 Zdenek Pytela <zpytela@redhat.com> - 34.7-1
 - Allow tgtd read and write infiniband devices
 - Add a comment on virt_sandbox booleans with empty content
diff --git a/sources b/sources
index a07af38..124135a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-c05289b.tar.gz) = 832c39708de4ee2377060208d9e34b79eaabf06fc499cf12e44de024a01d699cc3112e0a6cf8546e1ea2b84d9b14a82436475f7a4c504fad5b513453789fa6ab
-SHA512 (container-selinux.tgz) = f30af7eff4c12132b13bd702cc05def93f0f01a8717e3a62a99b37fb85c256006cd90557c664d74f61a508cd28505540bca35ffcefdf67dce67b3e43a6998be6
+SHA512 (selinux-policy-84d400b.tar.gz) = 82c732d8e575b9b760bf8d1231d78c3b6b149e11c462d1171109b1a1b72a6e9c56274ae9ae0bf59c6ff3db58836d8eb2ede00c0d5aabd058503671ba011ecd70
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 7854b564d7f2ff244d7bfe4fa324dff22da4c2d4546e0c5ccab152920eb869f75f5b347783fc6aec33779785db2506f51faf858dec693852416633419fad6d8a