diff --git a/keylime.spec b/keylime.spec
index ca995cf..baa0895 100644
--- a/keylime.spec
+++ b/keylime.spec
@@ -8,7 +8,7 @@
 
 Name:    keylime
 Version: 6.4.2
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: Open source TPM software for Bootstrapping and Maintaining Trust
 
 URL:            https://github.com/keylime/keylime
@@ -310,6 +310,10 @@ fi
 %license LICENSE
 
 %changelog
+* Fri Aug 26 2022 Patrik Koncity <pkoncity@redhat.com> - 6.4.2-4
+- Update keylime SELinux policy
+- Resolves: rhbz#2121058
+
 * Wed Aug 17 2022 Patrik Koncity <pkoncity@redhat.com> - 6.4.2-3
 - Add keylime-selinux policy as subpackage
 - See https://fedoraproject.org/wiki/SELinux/IndependentPolicy
diff --git a/keylime.te b/keylime.te
index fb460aa..05517d4 100644
--- a/keylime.te
+++ b/keylime.te
@@ -57,6 +57,7 @@ miscfiles_read_generic_certs(keylime_domain)
 
 sysnet_read_config(keylime_domain)
 
+userdom_manage_user_tmp_dirs(keylime_domain)
 
 ########################################
 #
@@ -134,4 +135,5 @@ optional_policy(`
 
 optional_policy(`
         systemd_userdbd_stream_connect(keylime_agent_t)
+        systemd_machined_stream_connect(keylime_agent_t)
 ')