diff --git a/opencryptoki.spec b/opencryptoki.spec
index 056b554..4268661 100644
--- a/opencryptoki.spec
+++ b/opencryptoki.spec
@@ -1,7 +1,7 @@
 Name:			opencryptoki
 Summary:		Implementation of the PKCS#11 (Cryptoki) specification v3.0
 Version:		3.21.0
-Release:		4%{?dist}
+Release:		5%{?dist}
 License:		CPL
 URL:			https://github.com/opencryptoki/opencryptoki
 Source0:		https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz
@@ -16,7 +16,7 @@ Patch100: opencryptoki-3.21.0-f4166214552a92d8d66de8011ab11c9c2c6bb0a4.patch
 Patch101: opencryptoki-3.21.0-4ff774568e334a719fc8de16fe2309e2070f0da8.patch
 
 Requires(pre):		coreutils diffutils
-Requires: 		(selinux-policy >= 34.1.8-1 if selinux-policy-targeted)
+Requires: 		(selinux-policy >= 38.1.14-1 if selinux-policy-targeted)
 BuildRequires:		gcc
 BuildRequires:		gcc-c++
 BuildRequires:		openssl-devel >= 1.1.1
@@ -348,6 +348,10 @@ fi
 
 
 %changelog
+* Tue Jun 13 2023 Than Ngo <than@redhat.com> - 3.21.0-5
+- add requirement on selinux-policy >= 38.1.14-1 for pkcsslotd policy sandboxing
+Related: #2160061
+
 * Fri May 26 2023 Than Ngo <than@redhat.com> - 3.21.0-4
 - add verify attributes for opencryptoki.conf to ignore the verification