diff --git a/.gitignore b/.gitignore
index abb3e26..70723e7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@
 /frr-8.2.2.tar.gz
 /frr-8.3.1.tar.gz
 /frr-8.4.tar.gz
+/frr-8.4.1.tar.gz
diff --git a/frr.spec b/frr.spec
index 6bd0274..506aeae 100644
--- a/frr.spec
+++ b/frr.spec
@@ -6,7 +6,7 @@
 %bcond_without selinux
 
 Name:           frr
-Version:        8.4
+Version:        8.4.1
 Release:        1%{?dist}
 Summary:        Routing daemon
 License:        GPLv2+
@@ -108,7 +108,7 @@ autoreconf -ivf
     --sysconfdir=%{_sysconfdir}/frr \
     --libdir=%{_libdir}/frr \
     --libexecdir=%{_libexecdir}/frr \
-    --localstatedir=%{_localstatedir}/run/frr \
+    --localstatedir=/run/frr \
     --enable-multipath=64 \
     --enable-vtysh=yes \
     --disable-ospfclient \
@@ -267,6 +267,10 @@ rm tests/lib/*grpc*
 %endif
 
 %changelog
+* Fri Nov 25 2022 Michal Ruprich <mruprich@redhat.com> - 8.4.1-1
+- New version 8.4.1
+- Fix for rhbz #2140705
+
 * Thu Nov 10 2022 Michal Ruprich <mruprich@redhat.com> - 8.4-1
 - New version 8.4
 
diff --git a/frr.te b/frr.te
index 2202498..b7ed1c2 100644
--- a/frr.te
+++ b/frr.te
@@ -33,7 +33,7 @@ files_pid_file(frr_var_run_t)
 #
 allow frr_t self:capability { chown dac_override dac_read_search kill net_bind_service net_raw setgid setuid net_admin };
 allow frr_t self:netlink_route_socket rw_netlink_socket_perms;
-allow frr_t self:packet_socket create;
+allow frr_t self:packet_socket { create setopt };
 allow frr_t self:process { setcap setpgid };
 allow frr_t self:rawip_socket create_socket_perms;
 allow frr_t self:tcp_socket { connect connected_stream_socket_perms };
diff --git a/sources b/sources
index 6964a2e..b25e3c0 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (frr-8.4.tar.gz) = ad24fd13dfb22957c05fdd72d0624ba3d5722d072e64366906aaa634cb70a4797ed0ebe22419199c32442e71638f33e8183daf6b46abb06e0d8d1bfc332d3bab
 SHA512 (remove-babeld-ldpd.sh) = a5bf67a3722cb20d43cef1dac28f839db68df73a1b7d34d8438e4f9366da3b67d85c1f44281f93434e8dd8ebcb2d3dc258b77eaa5627475b7395d207f020839d
+SHA512 (frr-8.4.1.tar.gz) = bc29088979bf0a1383d5bdb1bbe93697941048a489993a276ba6e6aa994b1c651fc630b47fa847805d60278657f3c6b45c5150256d01058d5483fb0867f0589e