diff --git a/.gitignore b/.gitignore
index 83dc8c2..3877b64 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@
 /passt-c3f1ba70237a9e66822aff3aa5765d0adf6f6307.tar.xz
 /passt-d04c48032bcf724550d0b8f652fd00efcd2dfad0.tar.xz
 /passt-a9c61ffaf15347b8dfcc2347c5440e4b0e82333b.tar.xz
+/passt-f8df3f1b228fe19a74a269334fdfe6cc7d0605ce.tar.xz
diff --git a/0001-selinux-Drop-user_namespace-create-allow-rules.patch b/0001-selinux-Drop-user_namespace-create-allow-rules.patch
index 5b5fea6..25817be 100644
--- a/0001-selinux-Drop-user_namespace-create-allow-rules.patch
+++ b/0001-selinux-Drop-user_namespace-create-allow-rules.patch
@@ -1,7 +1,7 @@
-From 7087adfbab35354f9def7edee87385b82416c722 Mon Sep 17 00:00:00 2001
+From e7546b1371f424dd21fc570e1d2cbdf9185fd438 Mon Sep 17 00:00:00 2001
 From: Stefano Brivio <sbrivio@redhat.com>
-Date: Mon, 8 Dec 2025 22:32:50 -0500
-Subject: [PATCH] selinux: Drop user_namespace create allow rules
+Date: Wed, 29 Jul 2026 15:31:06 -0400
+Subject: [PATCH 1/2] selinux: Drop user_namespace create allow rules
 
 Those are incompatible with current el9 kernels. I introduced them
 upstream with commit 62059058cf24 ("selinux: Fix user namespace
@@ -36,7 +36,7 @@ index 6995df8..76d23e8 100644
  auth_read_passwd(passt_t)
  
 diff --git a/contrib/selinux/pasta.te b/contrib/selinux/pasta.te
-index 95fe42a..7e1e821 100644
+index 9394f97..c6d051e 100644
 --- a/contrib/selinux/pasta.te
 +++ b/contrib/selinux/pasta.te
 @@ -126,7 +126,6 @@ allow pasta_t self:cap_userns { setpcap sys_admin sys_ptrace net_admin net_bind_
diff --git a/0002-selinux-Use-systemd_logind_exec_t-instead-of-systemd.patch b/0002-selinux-Use-systemd_logind_exec_t-instead-of-systemd.patch
index 0de5425..6ada922 100644
--- a/0002-selinux-Use-systemd_logind_exec_t-instead-of-systemd.patch
+++ b/0002-selinux-Use-systemd_logind_exec_t-instead-of-systemd.patch
@@ -1,7 +1,7 @@
-From 1053abff00f93de91efaf3e084fb34a25baa77e6 Mon Sep 17 00:00:00 2001
+From af3a3b6b9a1ef945eb83ab8dbd28360d8813a98e Mon Sep 17 00:00:00 2001
 From: Stefano Brivio <sbrivio@redhat.com>
-Date: Mon, 22 Dec 2025 21:48:32 -0500
-Subject: [PATCH] selinux: Use systemd_logind_exec_t instead of
+Date: Wed, 29 Jul 2026 15:44:34 -0400
+Subject: [PATCH 2/2] selinux: Use systemd_logind_exec_t instead of
  systemd_user_runtimedir_exec_t
 
 On CentOS Stream 9, selinux-policy doesn't contain commit
@@ -15,7 +15,7 @@ Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
  1 file changed, 2 insertions(+), 2 deletions(-)
 
 diff --git a/contrib/selinux/pasta.te b/contrib/selinux/pasta.te
-index 51ceb76..98e47b9 100644
+index c6d051e..f758fe4 100644
 --- a/contrib/selinux/pasta.te
 +++ b/contrib/selinux/pasta.te
 @@ -98,7 +98,7 @@ require {
@@ -27,8 +27,8 @@ index 51ceb76..98e47b9 100644
  }
  
  type pasta_t;
-@@ -254,7 +254,7 @@ allow pasta_t container_var_run_t:file { create open write };
- allow pasta_t ifconfig_var_run_t:file { create open write };
+@@ -255,7 +255,7 @@ allow pasta_t container_var_run_t:file { create open read write };
+ allow pasta_t ifconfig_var_run_t:file { create open read write };
  allow pasta_t container_var_run_t:sock_file { getattr create open read write };
  allow pasta_t ifconfig_var_run_t:sock_file { getattr create open read write };
 -allow systemd_user_runtimedir_t ifconfig_var_run_t:dir rmdir;
diff --git a/passt.spec b/passt.spec
index 160e735..b286c76 100644
--- a/passt.spec
+++ b/passt.spec
@@ -10,12 +10,12 @@
 # Copyright (c) 2022 Red Hat GmbH
 # Author: Stefano Brivio <sbrivio@redhat.com>
 
-%global git_hash a9c61ffaf15347b8dfcc2347c5440e4b0e82333b
+%global git_hash f8df3f1b228fe19a74a269334fdfe6cc7d0605ce
 %global selinuxtype targeted
 %global selinux_policy_version 41.41
 
 Name:		passt
-Version:	0^20260611.ga9c61ff
+Version:	0^20260728.gf8df3f1
 Release:	1%{?dist}
 Summary:	User-mode networking daemons for virtual machines and namespaces
 License:	GPL-2.0-or-later AND BSD-3-Clause
@@ -121,12 +121,10 @@ fi
 %doc %{_docdir}/%{name}/demo.sh
 %{_bindir}/passt
 %{_bindir}/pasta
-%{_bindir}/qrap
 %{_bindir}/passt-repair
 %{_bindir}/pesto
 %{_mandir}/man1/passt.1*
 %{_mandir}/man1/pasta.1*
-%{_mandir}/man1/qrap.1*
 %{_mandir}/man1/passt-repair.1*
 %{_mandir}/man1/pesto.1*
 %ifarch x86_64
@@ -144,6 +142,9 @@ fi
 %{_datadir}/selinux/packages/%{selinuxtype}/pesto.pp
 
 %changelog
+* Wed Jul 29 2026 Stefano Brivio <sbrivio@redhat.com> - 0^20260728.gf8df3f1-1
+- Resolves: RHEL-185655
+
 * Wed Jun 17 2026 Stefano Brivio <sbrivio@redhat.com> - 0^20260611.ga9c61ff-1
 - Resolves: RHEL-185655
 
diff --git a/sources b/sources
index c6b989e..e4ec65d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (passt-a9c61ffaf15347b8dfcc2347c5440e4b0e82333b.tar.xz) = fb1b34b92c0059c4e1d7ac01e36c90c51cbf42c8bcdcbbf42f22299facc6791cab640502772588a1bc7fe0ddff771f4058bd4da36de8188a13b08bad8766445c
+SHA512 (passt-f8df3f1b228fe19a74a269334fdfe6cc7d0605ce.tar.xz) = 9d5a9a19919a577ce32db4a6c9202c43718fd748559bd76f11a1eccdb8f34d5204cb4176241f63ef27d8f9907bd4f51f5ead8d83688f8b435338d0237be5f70b