diff --git a/selinux-policy.spec b/selinux-policy.spec
index 7c610c8b..1f72c240 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e9c0205362c47d39250b94edb0bac882f6d81f40
+%global commit fdcb02cf930668282b3d2eb98e347f309c02c291
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -28,7 +28,7 @@
 %define STABLEVER 38.1.70
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.80
+Version: 38.1.81
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -917,6 +917,46 @@ exit 0
 %endif
 
 %changelog
+* Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 38.1.81-1
+- Add the systemd_logind_stream_connect() interface
+Resolves: RHEL-163438
+- Add files_mounton_generic_tmp_dirs() interface
+Resolves: RHEL-163438
+- Allow staff user mounton /var/lib dirs
+Resolves: RHEL-163438
+- Allow staff user read nsfs files
+Resolves: RHEL-163438
+- Allow staff user additional sandboxing permissions
+Resolves: RHEL-163438
+- Allow staff_sudo_t read PID1's process state
+Resolves: RHEL-163438
+- Allow staff_sudo_t read logind sessions files
+Resolves: RHEL-163438
+- Allow staff user delete thump_tmp_t files
+Resolves: RHEL-163438
+- Allow login_userdomain read thumb tmp files
+Resolves: RHEL-163438
+- Allow staff user connect to systemd-logind over a unix stream socket
+Resolves: RHEL-163438
+- Allow staff user mount /proc
+Resolves: RHEL-163438
+- Support confined users usage of bubblewrap
+Resolves: RHEL-163438
+- Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
+Resolves: RHEL-179125
+- Allow rhsmcertd read anaconda run files
+Resolves: RHEL-179125
+- Allow any domain to inherit fds from rpm-ostree
+Resolves: RHEL-179125
+- Allow install_t domain transition to insights_client_t
+Resolves: RHEL-179125
+- Allow logrotate stop all systemd services
+Resolves: RHEL-169534
+- Allow staff and sysadm execute iotop using sudo
+Resolves: RHEL-172235
+- Allow sysadm_t to connect to iscsid using a unix domain stream socket
+Resolves: RHEL-155605
+
 * Mon May 18 2026 Zdenek Pytela <zpytela@redhat.com> - 38.1.80-1
 - Allow fido services connect to postgres database
 Resolves: RHEL-28814
diff --git a/sources b/sources
index b7b4dd0b..500fc6a8 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-e9c0205.tar.gz) = 85a003d58fa2e2e7da63e7442e429dab3d89382cd89df22e3bd5bb2a6adca89ae67c84e02784903f1c2f25ded6ae36d4f8e001f1eed174c0a96d0acdafc05001
+SHA512 (selinux-policy-fdcb02c.tar.gz) = cfb88e9267267e58cbb63ee84a9b72d1e6a574499e7be51598840dc34aaaa5976d25bad901a926d71b6b3e71baa3605c1af683673484c47617472ffb8bd2ab6c
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 673a81bbd9b46df1711177f4853ff39796f2be5c715d6ea5104ac1c0277d76ea0b24e8b1253f31082986797cdaa5ab6297b5eed9b49a2af4be9dda67452e5270
+SHA512 (container-selinux.tgz) = 5f4de11742c11a1537df7fa9b1bc0ad302895784d1355d88f62d131508618e13ee7ba29b4c915d651225c660375b2123e91fb07c4977331d426dbd9200840753