diff --git a/.gitignore b/.gitignore
index d9528a6..66137d3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -329,3 +329,4 @@ serefpolicy*
 /selinux-policy-509e071.tar.gz
 /selinux-policy-contrib-a265988.tar.gz
 /selinux-policy-d0c5c81.tar.gz
+/selinux-policy-0379b0e.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 551bf36..cdf31fa 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 d0c5c811fee0a5de5571dab531babf6544b1def9
+%global commit0 0379b0e4a4b22a7e86d183a9cfdd5f38080ac38b
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 16%{?dist}
+Release: 17%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -713,6 +713,11 @@ exit 0
 %endif
 
 %changelog
+* Fri Jan 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-17
+- Allow staff_t domain to read read_binfmt_misc filesystem
+- Add interface fs_read_binfmt_misc()
+- Revert "Allow staff_t to rw binfmt_misc_fs_t files BZ(1658975)"
+
 * Fri Jan 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-16
 - Allow sensord_t to execute own binary files
 - Allow pcp_pmlogger_t domain to getattr all filesystem BZ(1662432)
diff --git a/sources b/sources
index d47a65c..b16dd47 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
+SHA512 (container-selinux.tgz) = 158ad35b4bff3aca9218ebfb21599bd583e2b9ce8a7a92b86609e30218d214f87e5354b94269de4eee2c4333949d9e69ba79e34755437cb26e1af7432ea3a816
 SHA512 (selinux-policy-contrib-a265988.tar.gz) = 04916bc9e470fcf7e7963da3cad1f4daf4a283faba50273cbae2cdd12d31625e7ee70e2ae74059322ac1e1bd51b0044c74420468236315861f3bf40639a39069
-SHA512 (selinux-policy-d0c5c81.tar.gz) = 9aa59356512b05b56d6e096c82c3cd86b358b822e081221506917a9ff7395a9a1fee287086ba0bd13ffb97b1d259f24dd2a6962d2f6555c938ca7682ee5c91ee
-SHA512 (container-selinux.tgz) = 923051387ab6b3ffc94d2ff6ed63b25cd69ce6dca5a2180f6e0cf883a36d2487046629a82e8276d3d79ab55018064617b6fd0dfc8b468b3103d0360efdd7f24b
+SHA512 (selinux-policy-0379b0e.tar.gz) = 89eff3b59d4a2508cbe9fe4f27da06ed6e2ac06e6abcdd83dc806e90579c7640c607c8eab0f516e8db83652eab6195b1a66e95d2b0ef754cd19612090f288964