diff --git a/libreswan.spec b/libreswan.spec
index 303283a..40ef43d 100644
--- a/libreswan.spec
+++ b/libreswan.spec
@@ -33,7 +33,7 @@ Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
 Version: 3.32
-Release: %{?prever:0.}3%{?prever:.%{prever}}%{?dist}.2
+Release: %{?prever:0.}4%{?prever:.%{prever}}%{?dist}
 License: GPLv2
 Url: https://libreswan.org/
 Source0: https://download.libreswan.org/%{?prever:development/}%{name}-%{version}%{?prever}.tar.gz
@@ -46,6 +46,7 @@ Source3: https://download.libreswan.org/cavs/ikev2.fax.bz2
 Patch1: libreswan-3.30-s390x.patch
 Patch2: libreswan-3.32-nss-api.patch
 Patch3: libreswan-3.32-uninitialized.patch
+Patch4: libreswan-3.32-selinux.patch
 
 Requires(post): bash coreutils systemd
 Requires(preun): systemd
@@ -103,6 +104,7 @@ Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04
 %patch1 -p1
 %patch2 -p1
 %patch3 -p1
+%patch4 -p1
 
 # Fedora should really figure this versioning out itself, not burden upstream
 sed -i "s:/usr/bin/python:/usr/bin/python3:" testing/cert_verify/usage_test
@@ -202,6 +204,9 @@ export NSS_DISABLE_HW_GCM=1
 %doc %{_mandir}/*/*
 
 %changelog
+* Thu Aug 27 2020 Paul Wouters <pwouters@redhat.com> - 3.32-4
+- Resolves: rhbz#1864043 libreswan: FTBFS in Fedora rawhide/f33
+
 * Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.32-3.2
 - Second attempt - Rebuilt for
   https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild