diff --git a/selinux-policy.spec b/selinux-policy.spec
index 163982f2..d3896d87 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 9ecb03063e9f99c8ce4afb273e65b098c6cd5be7
+%global commit 7442094d568f5bcc8a62a26942076935f0496740
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.16
+Version: 34.1.17
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,22 @@ exit 0
 %endif
 
 %changelog
+* Thu Oct 14 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.17-1
+- Label /usr/sbin/virtproxyd as virtd_exec_t
+Resolves: rhbz#2002143
+- Allow at-spi-bus-launcher read and map xdm pid files
+Resolves: rhbz#2011772
+- Remove references to init_watch_path_type attribute
+Resolves: rhbz#2007960
+- Remove all redundant watch permissions for systemd
+Resolves: rhbz#2007960
+- Allow systemd watch non_security_file_type dirs, files, lnk_files
+Resolves: rhbz#2007960
+- Allow systemd-resolved watch /run/systemd
+Resolves: rhbz#1992461
+- Allow sssd watch /run/systemd
+Resolves: rhbz#1992461
+
 * Thu Sep 23 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.16-1
 - Allow fprintd install a sleep delay inhibitor
 Resolves: rhbz#1999537
diff --git a/sources b/sources
index 66f19eb6..a81efec4 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-9ecb030.tar.gz) = c30233c65578c370b7a0e7a4a0b781cf03281ddd8ad2de755c99d7fca8d333af6aca35f6924e85a7d0cdb0e062e3a43bedbd1d95c119ea2d4de5a604a7d1f304
+SHA512 (selinux-policy-7442094.tar.gz) = 9b631103950ad0e7b235abb443db5720ffdf846053b87563ef1e1c3b5df9b15ad35fa95c14053c4644fe1426660b9760cd1e9fa94b38f865f2559ec30107d317
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 92f1dce3772b5e4a4924f3d260cefc617939dc967c689d090279a6bf24b369d2d2dc1f816d43f063315b9e0d0c05f1b3dac82681b49b2860a106157b5bab7339
+SHA512 (container-selinux.tgz) = ebd2660deaaa7071d28d873063fca813b6a4546bd58d92782ffb84af095877cb42d5949d7e4cc08e06c94d3a51eff6a906ad5fbf92c6fb4b56c5589746ecd567