diff --git a/opencryptoki.spec b/opencryptoki.spec
index 70ba494..a3f34b6 100644
--- a/opencryptoki.spec
+++ b/opencryptoki.spec
@@ -1,7 +1,7 @@
 Name: opencryptoki
 Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0
 Version: 3.21.0
-Release: 4%{?dist}
+Release: 5%{?dist}
 License: CPL
 Group: System Environment/Base
 URL: https://github.com/opencryptoki/opencryptoki
@@ -21,7 +21,7 @@ Patch100: opencryptoki-3.21.0-f4166214552a92d8d66de8011ab11c9c2c6bb0a4.patch
 Patch101: opencryptoki-3.21.0-4ff774568e334a719fc8de16fe2309e2070f0da8.patch
 
 Requires(pre): coreutils diffutils
-Requires: (selinux-policy >= 3.14.3-70 if selinux-policy-targeted)
+Requires: (selinux-policy >= 3.14.3-121 if selinux-policy-targeted)
 BuildRequires: gcc
 BuildRequires: gcc-c++
 BuildRequires: openssl-devel >= 1.1.1
@@ -377,6 +377,10 @@ fi
 
 
 %changelog
+* Tue Jun 13 2023 Than Ngo <than@redhat.com> - 3.21.0-5
+- add requirement on selinux-policy >= 3.14.3-121 for kcsslotd policy sandboxing
+Related: #2159697
+
 * Thu May 25 2023 Than Ngo <than@redhat.com> - 3.21.0-4
 - add verify attributes for opencryptoki.conf to ignore the verification
 Related: #2159697