diff --git a/selinux-policy.spec b/selinux-policy.spec
index 62bc716..011ed15 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 6dd0ca5b26b8d48d3fdb90333f27402a32624d83
+%global commit 0476ff2d8cf20dc339d7972ec87c98939599287a
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 36.7
+Version: 36.8
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -813,6 +813,19 @@ exit 0
 %endif
 
 %changelog
+* Tue Apr 26 2022 Zdenek Pytela <zpytela@redhat.com> - 36.8-1
+- Allow nm-dispatcher chronyc plugin append to init stream sockets
+- Allow tmpreaper the sys_ptrace userns capability
+- Label /usr/libexec/vdsm/supervdsmd and vdsmd with virtd_exec_t
+- Allow nm-dispatcher tlp plugin read/write the wireless device
+- Allow nm-dispatcher tlp plugin append to init socket
+- Allow nm-dispatcher tlp plugin be client of a system bus
+- Allow nm-dispatcher list its configuration directory
+- Ecryptfs-private support
+- Allow colord map /var/lib directories
+- Allow ntlm_auth read the network state information
+- Allow insights-client search rhnsd configuration directory
+
 * Thu Apr 21 2022 Zdenek Pytela <zpytela@redhat.com> - 36.7-3
 - Add support for nm-dispatcher tlp-rdw scripts
 - Update github actions to satisfy git 2.36 stricter rules
diff --git a/sources b/sources
index a01f8c5..262a195 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-6dd0ca5.tar.gz) = bc5788bd21c743c48f07f876ad6a12d4d8dfa050b633b3eb59f612c0e1ccaf9f48be4a1615e33bc9694d5e4fc83e0f8bf72ce809f16cd77a006f684a95327a3f
-SHA512 (container-selinux.tgz) = 571f12532dd5f77fc73c0de6790eabe7a7e4a7dfb050e982f02c2f616aeee21203da68b493dc41a9a981d7bc2d10f40d3ff3ffbae38da3ea6ccf43ffb55f38f5
+SHA512 (selinux-policy-0476ff2.tar.gz) = 87e0d5f497037203ba7b674084688a1ff85a1a34679b2bb0ef6de93326da34fef0b9a8402860b4c9796a6e33fd6164a8c18fefa0b5347d026ef3b13f0e3c356e
+SHA512 (container-selinux.tgz) = 069fdd73bb8e7665642954176c9e5edb93e0a604b9df4461161a323ae145fa1b476857263d2ef0093406e21f6a6be4d51df80b00806069b00ffa7d11509c349c
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4