diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index 5341f91..e6fcca7 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -2684,3 +2684,17 @@ rhcd = module
 # wireguard
 #
 wireguard = module
+
+# Layer: contrib
+# Module: mptcpd
+#
+# mptcpd
+#
+mptcpd = module
+	
+# Layer: contrib
+# Module: rshim
+#
+# rshim
+#
+rshim = module
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 6a5616c..3402e93 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit c2406ec85d4e2917ba16518d5538df73e89f8343
+%global commit 390b4e8af29092a1063ad1f5d55d898b33f1a293
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.1.2
+Version: 38.1.3
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -808,6 +808,32 @@ exit 0
 %endif
 
 %changelog
+* Thu Dec 15 2022 Nikola Knazekova <nknazeko@redhat.com> - 38.1.3-1
+- Allow stalld to read /sys/kernel/security/lockdown file
+Resolves: rhbz#2140673
+- Allow syslog the setpcap capability
+Resolves: rhbz#2151841
+- Allow pulseaudio to write to session_dbusd tmp socket files
+Resolves: rhbz#2132942
+- Allow keepalived to set resource limits
+Resolves: rhbz#2151212
+- Add policy for mptcpd
+Resolves: bz#1972222
+- Add policy for rshim
+Resolves: rhbz#2080439
+- Allow insights-client dbus chat with abrt
+Resolves: rhbz#2152166
+- Allow insights-client work with pcp and manage user config files
+Resolves: rhbz#2152150
+- Allow insights-client run lpr and allow the proper role
+Resolves: rhbz#2152150
+- Allow insights-client tcp connect to various ports
+Resolves: rhbz#2152150
+- Allow insights-client dbus chat with various services
+Resolves: rhbz#2152150
+- Allow journalctl relabel with var_log_t and syslogd_var_run_t files
+Resolves: rhbz#2152823
+
 * Wed Nov 30 2022 Zdenek Pytela <zpytela@redhat.com> - 38.1.2-1
 - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
 Resolves: rhbz#2124549
diff --git a/sources b/sources
index dc6aca2..bd9417c 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-c2406ec.tar.gz) = 5f00bb39ae8883040e5e0e4968117fe94be8c3e4b3e988e046c55a17bcf858a9f3a6dedb3b677de2ded47e6330e1081bb01adc6545df80a92398ef4651c48136
+SHA512 (selinux-policy-390b4e8.tar.gz) = b9418e35ce0674c3fef79d27789750691662994f52faf6e8d541f4b9bda07a2206668737fe9bf58ee5ac0662bb5c49b640bb3155ba4a95fd9545826eaf1e7f52
+SHA512 (container-selinux.tgz) = 20fe003717a7fdd5d389a1917a6c83fadda32d4a173120424e20520105b3d15f9b6c6684152dd3387afb19c151b44aabebf582694b8354aab2a5a1734e464009
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 011cbcdc028ef2441a7ad3d04d8c123298ca6c96e5b0c67f0e6726182c1f63a7dd2a9bfbbc21c64b4b49b5ae4aa957e4c3c91988de6f540d16e9c03a514751e0