diff --git a/.gitignore b/.gitignore
index 951665c..c2c88c3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/container-selinux.tgz
 SOURCES/selinux-policy-55f4df9.tar.gz
-SOURCES/selinux-policy-contrib-1345afd.tar.gz
+SOURCES/selinux-policy-contrib-73a88dc.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index 1570b6e..c4abb92 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,3 +1,3 @@
-64f47a509160617d1e61e681cbf520b113fe301c SOURCES/container-selinux.tgz
+526c41eed592a718650dde4345718e26fc32b581 SOURCES/container-selinux.tgz
 c10a1f894f9a2b1eb2159c2c753d97a5ff788887 SOURCES/selinux-policy-55f4df9.tar.gz
-082d8d7d8ec0f456465784e1fed3702d11537831 SOURCES/selinux-policy-contrib-1345afd.tar.gz
+77721918853ad9706dc2189c1787587ee6c3b72e SOURCES/selinux-policy-contrib-73a88dc.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index ba931fb..d403220 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 1345afd6e3eff022bddae1a22c2856df5f9f47de
+%global commit1 73a88dc7435b803ba860e8938c9611dd62ef6d5c
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 67%{?dist}.1
+Release: 67%{?dist}.2
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -715,6 +715,10 @@ exit 0
 %endif
 
 %changelog
+* Thu Sep 02 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-67.2
+- Label /.k5identity file allow read of this file to rpc.gssd
+Resolves: rhbz#1995594
+
 * Tue Jun 29 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-67.1
 - Label /var/lib/kdump with kdump_var_lib_t
 Resolves: rhbz#1976260