diff --git a/.gitignore b/.gitignore
index 484d2ed5..cf9ea1a2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -359,3 +359,4 @@ serefpolicy*
 /selinux-policy-f1590bb.tar.gz
 /selinux-policy-contrib-8659df1.tar.gz
 /selinux-policy-f8a2347.tar.gz
+/selinux-policy-379f4fb.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 3e1c9e9f..cab1618a 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 f8a234739cc2409b70ebeca3147856f026482aff
+%global commit0 379f4fb842e1b2c7a4b7c365265e0bdab52b2be4
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.4
-Release: 9%{?dist}
+Release: 10%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -787,6 +787,10 @@ exit 0
 %endif
 
 %changelog
+* Tue Apr 09 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-10
+- Allow systemd_modules_load to read modules_dep_t files
+- Allow systemd labeled as init_t to setattr on unallocated ttys BZ(1697667)
+
 * Mon Apr 08 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-9
 - Merge #18 `Add check for config file consistency`
 - Allow tlp_t domain also write to nvme_devices block devices BZ(1696943)
diff --git a/sources b/sources
index 066ad6ca..df29455d 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (selinux-policy-contrib-8659df1.tar.gz) = 3b153d7b5190452561e1b6253dcdebac1e8cf20d071734b44f38f0e74b3106a5158a1fbcd004d2b29befaed98cda30a937bc4f38a60be13f2943c57b61296cac
-SHA512 (selinux-policy-f8a2347.tar.gz) = 7c6434f09f02e8b93ae494e7567a45ad99e14f5fbc00f1d846a6cacad46de1c605dd8255764fd240010a0b5c8c532cee00f6d8f7b29b6751fde2ff94d6afb23d
-SHA512 (container-selinux.tgz) = d50466ecfc34645df7f40532688afe720dd51ae7a9e56dbc735278be0e12b076780128ab59aee7534bfe9f91eb36780c7920ad422c936289a2c90f9c8d283d0c
+SHA512 (selinux-policy-379f4fb.tar.gz) = 41aabd4e2b63a672e111f0b1ebeb4ee7a9de2e692c43a511856fb02d0c2b42e2d01db617cd4eacf2c0b8d57f4b319f549c7926d444be5defa595a9b79a9652fb
+SHA512 (container-selinux.tgz) = dc94c04569fd70e7a4dd955f0b9e50c19e8900fd89659cef0f7001cdd6248e2b535923dd36694ed99cc7dccaf696e1dd18dae91a29b767c9b50f9452de8b6163
 SHA512 (macro-expander) = b4f26e7ed6c32b3d7b3f1244e549a0e68cb387ab5276c4f4e832a9a6b74b08bea2234e8064549d47d1b272dbd22ef0f7c6b94cd307cc31ab872f9b68206021b2