diff --git a/selinux-policy.spec b/selinux-policy.spec
index 2e9b33ca..4fac792a 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 575a5e6f268a40c25e7921ef79e00918fb7ce476
+%global commit da810071c8a75585734a33abe453ae69f353d13b
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.5
+Version: 40.13.6
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -860,6 +860,17 @@ exit 0
 %endif
 
 %changelog
+* Thu Jul 25 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.6-1
+- Allow virtnodedevd run udev with a domain transition
+Resolves: RHEL-39890
+- Allow virtnodedev_t create and use virtnodedev_lock_t
+Resolves: RHEL-39890
+- Allow svirt attach_queue to a virtqemud tun_socket
+Resolves: RHEL-44312
+- Label /run/systemd/machine with systemd_machined_var_run_t
+Resolves: RHEL-49567
+- Allow to create and delete socket files created by rhsm.service
+
 * Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
 - Allow to create and delete socket files created by rhsm.service
 Resolves: RHEL-40857
diff --git a/sources b/sources
index 98740da8..a22b836a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-575a5e6.tar.gz) = af502b1414c9a418e7c6647ba9f6c6c54dcaa08e96c5fb026be04eba30b3a435f560828988ee0ece3b1dde2900411420a07d3eaff68cbc4b7eaf7455f7ddd683
-SHA512 (container-selinux.tgz) = 9864a3de2ae1c8de37089b6f5157fc6aa67cdbe4dd6e2fce759d4ccbf15aa194e020fd9dec0d77bd46afb4064cc33b9d90d1acfac0fe8ac156b5a103e296314f
+SHA512 (selinux-policy-da81007.tar.gz) = a8184c43732c5393a42345dff76c72fb6855ec03226b892238d30ef275e30789edf4ff83582ac566b6c05528e271e14820695c0683ff704bf7807f74f53f25de
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = dcde448a22cd51ef7caf694554fc241c0cee2f5e5cacc9e223dbf76a4e5afa693f672ebd8ca744d501a96c46ae6d831f493ced9e40b29e75baca2f49703c774e