diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index abdba8e..16c50db 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -2670,3 +2670,10 @@ stratisd = module
 # ica
 #
 ica = module
+
+# Layer: contrib
+# Module: fedoratp
+#
+# fedoratp
+#
+fedoratp = module
diff --git a/selinux-policy.spec b/selinux-policy.spec
index fbf973a..6b5ae4b 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 1715509773b3387a0c74423c05d53eb401d9b470
+%global commit d9870e9b28ccafd392d0ecef6cc5b0d807120fcc
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.21
+Version: 35.1
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -808,6 +808,15 @@ exit 0
 %endif
 
 %changelog
+* Thu Oct 07 2021 Zdenek Pytela <zpytela@redhat.com> - 35.1-1
+- Add fedoratp module
+- Allow xdm_t domain transition to fedoratp_t
+- Allow ModemManager create and use netlink route socket
+- Add default file context for /run/gssproxy.default.sock
+- Allow xdm_t watch fonts directories
+- Allow xdm_t watch generic directories in /lib
+- Allow xdm_t watch generic pid directories
+
 * Thu Sep 23 2021 Zdenek Pytela <zpytela@redhat.com> - 34.21-1
 - Add bluetooth-related permissions into a tunable block
 - Allow gnome at-spi processes create and use stream sockets
diff --git a/sources b/sources
index e9c3281..98093f6 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-1715509.tar.gz) = d20f47dd8763087e0ee254a1b1ddcc499d2e6e61346032d3455084f6a82cf275e0f286b0186bcae8193cb5674f5b0cbc79be151a5750b1da636465e7d80c2dcc
+SHA512 (selinux-policy-d9870e9.tar.gz) = 11d50e8a39b00a8b2e31a4e624dcf607e953e0210a75a13e1e44252a9091c434019953af68653ee902128d7b09475846807ae72f4364d44120590b01cd363941
+SHA512 (container-selinux.tgz) = d83bde7ec8f973b2626820efaea5b2a6d50b469e6149bb6cf8272a05d2e875d7c4b4c656b5d546a38ae875625dd4f2422947fc69652cf29291526b317d5d83a4
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = b42b80ae4864217dd97a012be4cbfe4287fb8debda507b396d5926be24357b13178d133e3d75fbac26ae9cf5aaf7c0f4c06e9d3cc6278c58d5d0d52b21cfbc61