diff --git a/.gitignore b/.gitignore
index 64b57f58..4c383d38 100644
--- a/.gitignore
+++ b/.gitignore
@@ -318,3 +318,4 @@ serefpolicy*
 /selinux-policy-8bcb254.tar.gz
 /selinux-policy-contrib-5252fe6.tar.gz
 /selinux-policy-2d39d24.tar.gz
+/selinux-policy-contrib-a69f9e6.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 256ec7e3..2b8f20f6 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 5252fe6bb92d282173ba836b59172bc7c99609a8
+%global commit1 a69f9e63d83dd5f603147ddf7a349e075c80959d
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 9%{?dist}
+Release: 10%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -709,6 +709,9 @@ exit 0
 %endif
 
 %changelog
+* Tue Oct 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-10
+- Allow boltd_t domain to dbus chat with fwupd_t domain BZ(1633786)
+
 * Mon Oct 15 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-9
 - Allow caller domains using cron_*_role to have entrypoint permission on system_cron_spool_t files BZ(1625645)
 - Add interface cron_system_spool_entrypoint()
diff --git a/sources b/sources
index ff06a766..b670d9b4 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-contrib-5252fe6.tar.gz) = 366636200668f30cf8520fb8fb2f4f6292d86b093fbe03c3414da24705ac40ab5e4f7943b484fbeba5f3def76fe1e2cf2b1160f56f7ad04d0aef3b6dd61cde74
 SHA512 (selinux-policy-2d39d24.tar.gz) = 0b25543fa70599a6086336fa90edf69acda23d7c5df861a88b5733e7c14947e5f05a178e7f8fb5ebc8da9c90c1a45a746265c9ced677f4887c5267252d0e59b4
-SHA512 (container-selinux.tgz) = b24c37183ad16f64eb5b3b50a4e4293a17b94571dd7bfb365f219127dde35e4235d7c3f885fb25cb7e12e8e836e1f48a8b854b8acf22a1856617a5b9ca8423d2
+SHA512 (selinux-policy-contrib-a69f9e6.tar.gz) = c62e676a671e7972ea21e29c2b63c773d52364abc578aea4a5d58d283311dcef8fa8ea5f835802e2672a8ee0ee182c7d3d548df9de09df400d7dddc4ad26efce
+SHA512 (container-selinux.tgz) = 4551b22581627050aa1e3bb3af025f22203d6d551d2e45e364bd702b4ca89253c6c47bb32fdf8e80727a8586defbfcd0d52e2a612d97a22d8f76217666c7f864