diff --git a/.gitignore b/.gitignore
index 0aca8b5..417dc40 100644
--- a/.gitignore
+++ b/.gitignore
@@ -392,3 +392,4 @@ serefpolicy*
 /selinux-policy-contrib-2b47485.tar.gz
 /selinux-policy-da92bd2.tar.gz
 /selinux-policy-contrib-b7144a2.tar.gz
+/selinux-policy-cd63aff.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4781e50..ade1ae3 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 da92bd2462c7b6f3509705c32c743d4e74aa0517
+%global commit0 cd63aff25446f708713cd6f9f65001e2b35b3427
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.4
-Release: 27%{?dist}
+Release: 28%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -787,6 +787,9 @@ exit 0
 %endif
 
 %changelog
+* Tue Aug 06 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-28
+- Allow systemd to create and bindmount dirs. BZ(1734831)
+
 * Mon Aug 05 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-27
 - Allow tlp domain run tlp in trace mode BZ(1737106)
 - Make timedatex_t domain system dbus bus client BZ(1737239)
diff --git a/sources b/sources
index 2e9f10c..435bf84 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
+SHA512 (selinux-policy-cd63aff.tar.gz) = a6b92f5800371c1726f0c8f386f3352f564c52c9ed4a5ecde09a6141fabc657ca44020c34a13c9cd592ec3411c462ced80d74ad77a8403dcad08eec3cdc02136
 SHA512 (selinux-policy-contrib-b7144a2.tar.gz) = 4f175b59918bc3aabc3ee8c9a38a875078d8f01bfcd5c4e48e4ffd2d80c311e5eb4766cc227f495f0363dfdd9c71bdb63c187c8b74c2b419eb6af85b95eac37d
-SHA512 (selinux-policy-da92bd2.tar.gz) = 4f3cbadc5f8e933ea9bce583fa44a40a993e1323abe71879528ef96473e712bd22a72a67c54213c12030561185f4a8f09a0a1b62edf590be6ccd0e7177708b6b
-SHA512 (container-selinux.tgz) = 65ac0596ff4abb15f320168a0b494c45773a3c0cec2252ef727dd0677e9edabfeaf8f7fcaf2456f096bbdd9bd916f3919f039405a546e05773b29cc2ccda9f77
+SHA512 (container-selinux.tgz) = 97e2a34798b59816e8b50a01a4d086b94c14a2b77b5f3b4c638c06d0713bf8352ad4b068eefce1b71e6acd96039f761d68330aefaf56d235ac2e3d6204960dfb
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4