diff --git a/selinux-policy.spec b/selinux-policy.spec
index d56e7eac..89cb8d3f 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 6885353faf0be1100afbd4503623b0e59f73fb3f
+%global commit 3fb7986b0410a2e1d45d63d881fdc435aca244b4
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.3
+Version: 34.1.4
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,24 @@ exit 0
 %endif
 
 %changelog
+* Wed May 12 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.4-1
+- Allow sysadm_t dbus chat with tuned
+Resolves: rhbz#1953643
+- Allow tuned write profile files with file transition
+Resolves: rhbz#1953643
+- Allow tuned manage perf_events
+Resolves: rhbz#1953643
+- Make domains use kernel_write_perf_event() and kernel_manage_perf_event()
+Resolves: rhbz#1953643
+- Add kernel_write_perf_event() and kernel_manage_perf_event()
+Resolves: rhbz#1953643
+- Allow syslogd_t watch root and var directories
+Resolves: rhbz#1957792
+- Allow tgtd create and use rdma socket
+Resolves: rhbz#1955559
+- Allow aide connect to init with a unix socket
+Resolves: rhbz#1926343
+
 * Wed Apr 28 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.3-1
 - Allow domain create anonymous inodes
 Resolves: rhbz#1954145
diff --git a/sources b/sources
index 3ca506b2..98d7cbdd 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-6885353.tar.gz) = 75dd4f7a435758906c00421eb073b0e3fd154ab91c4026e90cbc243dee4db5709c3e1f1b1ee13dff70e9e3ae4f251bf8a54371c5cfc0baad653e896951d52529
+SHA512 (selinux-policy-3fb7986.tar.gz) = aa975e95386a7ff58c18351c5e55bdb785b7b30b37c518ec2e0f0730aa6b81c118aa05d4b99fb940d0dc3a388d0cde1aa99e5f9520bf6d23b0d2efe8f313450f
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 34acf1f75fccd1303bd94250dfd8839f38de893825cd89830af78a02233107d440e83fe4e5e947d3d5b0e837143315bb44fe17b2e0900b5b0bb1ffd01bdcf1c1
+SHA512 (container-selinux.tgz) = 786ad4948f71abc4792abd4cddfa21b741f08c38bd6c8f7e4bcb584ade398d0ee81a49ad6c94a603007a8c95e39663c8736e0922595cd272b72c6b85fcec3bf8