diff --git a/selinux-policy.spec b/selinux-policy.spec
index 9eee3c7..08a831c 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit ff83d3a677ef63944024d45371f0346b6e0d047c
+%global commit 1f00e9902fc460b1b1eedb5fbb182bdff6924e33
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.10
+Version: 38.1.11
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -809,6 +809,12 @@ exit 0
 %endif
 
 %changelog
+* Mon Mar 27 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
+- Allow passt manage qemu pid sock files
+Resolves: rhbz#2172268
+- Exclude passt.if from selinux-policy-devel
+Resolves: rhbz#2172268
+
 * Fri Mar 24 2023 Nikola Knazekova <nknazeko@redhat.com> - 38.1.10-1
 - Add support for the passt_t domain
 Resolves: rhbz#2172268
diff --git a/sources b/sources
index bf1f254..b817b38 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-ff83d3a.tar.gz) = 4f871d6ae2b4bb6d371ecbe7b92f4eefe594df52908adf6577f079b077097ffebf3669902801477c2d7743b28b7e32bf9d04a82e5fb37c69968c844d4b89cd02
-SHA512 (container-selinux.tgz) = 12378daa0d1fb879bfd86a97f05ad1f92d264d7d5bc6b1d4ee18bdbb227b11e25d2f27d3cb0ea35c445c2b2bb87e43f0093fe08d5293956cca5bc2306c40e9fa
+SHA512 (selinux-policy-1f00e99.tar.gz) = 38717d8956d03e810bbe55aa58c38e90819cbe3cbc42e9095ced2dfee2381dc013db7c21df22e708d1802a031b565b675f2962d8834e95cbfad9e46a253c34e3
+SHA512 (container-selinux.tgz) = ac99a6a69d06b0ac2dac1ab6def4c96cd5423d97d97fb69d5463f28e7cdc3d807918a883ca155606244c67491c63bd1aa7f59146e63873db99c431873ba6bce0
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4