diff --git a/selinux-policy.spec b/selinux-policy.spec
index 04d79473..a25d1582 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 488b443ad142f14603009863eee6650022bfc349
+%global commit 36a2a79662226cc72963a8b9fcafd2bf5056ea7f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.8
+Version: 34.1.9
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,29 @@ exit 0
 %endif
 
 %changelog
+* Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.9-1
+- Allow systemd-coredump getattr nsfs files and net_admin capability
+Resolves: rhbz#1965372
+- Label /run/libvirt/common with virt_common_var_run_t
+Resolves: rhbz#1969209
+- Label /usr/bin/arping plain file with netutils_exec_t
+Resolves: rhbz#1952515
+- Make usbmuxd_t a daemon
+Resolves: rhbz#1965411
+- Allow usbmuxd get attributes of cgroup filesystems
+Resolves: rhbz#1965411
+- Label /dev/dma_heap/* char devices with dma_device_t
+- Revert "Label /dev/dma_heap/* char devices with dma_device_t"
+- Revert "Label /dev/dma_heap with dma_device_dir_t"
+- Revert "Associate dma_device_dir_t with device filesystem"
+Resolves: rhbz#1967818
+- Label /var/lib/kdump with kdump_var_lib_t
+Resolves: rhbz#1965989
+- Allow systemd-timedated watch runtime dir and its parent
+Resolves: rhbz#1970865
+- Label /run/fsck with fsadm_var_run_t
+Resolves: rhbz#1970911
+
 * Thu Jun 10 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.8-1
 - Associate dma_device_dir_t with device filesystem
 Resolves: rhbz#1954116
diff --git a/sources b/sources
index 3c698c20..7d43b2f9 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-488b443.tar.gz) = b88fe25c221dda767e743209933f71b0913a26aa0147a58d855b66e48f05bdc9acf8a0609313756470ca50688bd73cde88beee93f68b58f38a0a16e1dc78d538
+SHA512 (selinux-policy-36a2a79.tar.gz) = f56ee6964c19d7d53502c9d32f7dc00e662c02d642891492bf2f16ff3ae1658e310a05f86bd7faed6f82af0d1205e927401ac08b90cf05ec6e512d3bdbb0ec01
+SHA512 (container-selinux.tgz) = 6f0ceeab04740e425085b743301739fce4849c8c4b60a90b6720fc5af3804e3d6b69db638c95f4da437cb33eb754ef494cbc821fd637d646fc2c2c4efd4d42f7
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 3a49ceebf9e600c52a80bceb612033ed4fdaca73e0f127adb3273862aaddadf904bbadb84468598f22049c547e3df3b41745a8d830aa4ac7bf11c871c9ab6af9