diff --git a/changelog b/changelog
index 91c30bd..f22f142 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,20 @@
+* Tue Jun 11 2024 Zdenek Pytela <zpytela@redhat.com> - 41.3-1
+- Update systemd-generator policy
+- Remove permissive domain for bootupd_t
+- Remove permissive domain for coreos_installer_t
+- Remove permissive domain for afterburn_t
+- Add the sap module to modules.conf
+- Move unconfined_domain(sap_unconfined_t) to an optional block
+- Create the sap module
+- Allow systemd-coredumpd sys_admin and sys_resource capabilities
+- Allow systemd-coredump read nsfs files
+- Allow generators auto file transition only for plain files
+- Allow systemd-hwdb write to the kernel messages device
+- Escape "interface" as a file name in a virt filetrans pattern
+- Allow gnome-software work for login_userdomain
+- Allow systemd-machined manage runtime sockets
+- Revert "Allow systemd-machined manage runtime sockets"
+
 * Fri Jun 07 2024 Zdenek Pytela <zpytela@redhat.com> - 41.2-1
 - Allow postfix_domain connect to postgresql over a unix socket
 - Dontaudit systemd-coredump sys_admin capability
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 1f288d6..b023485 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 52d7b9cd0bc95a912a7ac5b5a0ba9e2e0af9ae1d
+%global commit 8acf4e61c347a2b851ad68324a6489aa75791fcd
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -17,7 +17,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 41.2
+Version: 41.3
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
diff --git a/sources b/sources
index d6d963c..704a5cc 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-52d7b9c.tar.gz) = f1f0aeedb4d0e51c20433963aaad9446dfa24b29e49edd595fca70ea6790f1c5c319fdb3c0c4379adec053b5196a4aca174a7a34d914dc85c5bbdcfa022d3aec
+SHA512 (selinux-policy-8acf4e6.tar.gz) = 46f1c91f783216524c59c768da586431b0b4a1b0e89ffd938065b924968148d7a87b501a6417a874e62243bb8ab69d46d48fa9840ff855152e204ca1e94c3b12
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 1b3300c80eff0dd408efa737e071057d3d4c7c47f1303cca622d84bfd0a0a04e4aaa624c8a68ee3146fb1bcd21723350f926fe875046f89ae22825a2623cd8b3
+SHA512 (container-selinux.tgz) = ab6916605d56e8d122d4f64d1c14cd5395c1078143c91986e50208fccb717e2e905b4d7ad2989c92307a1edf64d82e69be1d225c599af326939e5bd6839d12b5