diff --git a/selinux-policy.spec b/selinux-policy.spec
index 440e0596..7c291030 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 485578ca5fa9c5c4613a5e2af687d6ffba9785ab
+%global commit ded872968a492f28e2f5f9631c208aecec4f5519
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.7
-Release: 28%{?dist}
+Release: 29%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -792,6 +792,9 @@ exit 0
 %endif
 
 %changelog
+* Mon Mar 29 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-29
+- Add watch_with_perm_dirs_pattern file pattern
+
 * Fri Mar 26 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-28
 - Allow arpwatch_t create netlink generic socket
 - Allow postgrey read network state
diff --git a/sources b/sources
index 014fa710..980de48f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-485578c.tar.gz) = 73eecdc99968676d8db4357c7b6fb77a929d7afba84725481185acb925ba2619a47cab900c62ff5e0d9bd016e8a3de7c38ebb5284f43a8cb00b6409976de9531
+SHA512 (selinux-policy-ded8729.tar.gz) = accdff6b07dc11066fbb2f5545fd71a3889cdedd2b1f3b66511636d89214a5c40d7a01a1e1879c0b9e917b18de24320cc9f5ef7bdca0cb4d537cffbfa4707b47
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 269b29e3829df8d0cc731f9b2739844d0fca8e566ec5c67ee855c43ac5d2361684ca9964c3e8cbfebd5d06f3c5d510b5c85e9e92e0726915d6801d912afd77e8
+SHA512 (container-selinux.tgz) = 10f9f5b8fa2718a687f59e8d37bddb383827ac99500fbaa43ab01b458a16f301b2b87cf66027ccf2b40528e7ff5ad2ae637c7b7b7041273fb368add71b2b6a2a