diff --git a/selinux-policy.spec b/selinux-policy.spec
index 84ecfd7..d3c93ba 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e82ad03883fec6968f07d229ce8720dd593ee72e
+%global commit e4ea1e13059ac475c3f012a3f58cbf0b0e554164
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.7
-Release: 20%{?dist}
+Release: 21%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -792,6 +792,18 @@ exit 0
 %endif
 
 %changelog
+* Tue Feb 16 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-21
+- Allow unconfined integrity lockdown permission
+- Relocate confidentiality lockdown rule from unconfined_domain_type to unconfined
+- Allow systemd-machined manage systemd-userdbd runtime sockets
+- Enable systemd-sysctl domtrans for udev
+- Introduce kernel_load_unsigned_module interface and use it for couple domains
+- Allow gpg watch user gpg secrets dirs
+- Build also the container module in CI
+- Remove duplicate code from kernel.te
+- Allow restorecond to watch all non-auth directories
+- Allow restorecond to watch its config file
+
 * Fri Feb 12 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-20
 - Allow userdomain watch various filesystem objects
 - Allow systemd-logind and systemd-sleep integrity lockdown permission
diff --git a/sources b/sources
index 90468f8..fc948e9 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = 3ef4ed4f154c1fa815e2f9fc3bcd68224b75cabbcb822c604ab5e13406315599ef30e63104dc732230e17a4dec72829de4827ad9cba0f2198b3852f151e6eea8
+SHA512 (selinux-policy-e4ea1e1.tar.gz) = a672247aa1de8111062dac3e37ca5840e548175740eccb65ebe92bc6d3477227c0119981b3411491d100af601468c876f68de6ec02fbdfcb07ea7e276aa6cffb
+SHA512 (container-selinux.tgz) = dd7b52f74d44047f0e6ceea1a10755eae2ac661660d2192ece0ceb4a9ae65ad580868f39718d3f7028b7d22eddde33440b9e1ef0f0260714daa21221ca701b41
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (selinux-policy-e82ad03.tar.gz) = d59dbb452e659f0b7eec45dfdd37c7adc9bd03efd8d179344aa8ef1b89d3b51df9c092cc28964db5724db8a23ee1736ba00be72178d9f4dc3fcbc61cbe3074d2