diff --git a/selinux-policy.spec b/selinux-policy.spec
index 4ffe3df..8ddd8ab 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 2ee39c559a721d86f1903ba8f7115e1583fa0e55
+%global commit d71265e00b14d67d5df685484975fc66ec340804
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.23
+Version: 38.24
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -814,6 +814,17 @@ exit 0
 %endif
 
 %changelog
+* Fri Aug 04 2023 Zdenek Pytela <zpytela@redhat.com> - 38.24-1
+- Allow rhsmcertd dbus chat with policykit
+- Allow polkitd execute pkla-check-authorization with nnp transition
+- Allow user_u and staff_u get attributes of non-security dirs
+- Allow unconfined user filetrans chrome_sandbox_home_t
+- Allow svnserve execute postdrop with a transition
+- Do not make postfix_postdrop_t type an MTA executable file
+- Allow samba-dcerpc service manage samba tmp files
+- Add use_nfs_home_dirs boolean for mozilla_plugin
+- Fix labeling for no-stub-resolv.conf
+
 * Wed Aug 02 2023 Zdenek Pytela <zpytela@redhat.com> - 38.23-1
 - Revert "Allow winbind-rpcd use its private tmp files"
 - Allow upsmon execute upsmon via a helper script
diff --git a/sources b/sources
index 6b0ccb2..da71a20 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-2ee39c5.tar.gz) = 00f8339447123c69a7dcec60ea90b0eef97b7ce77dc3a73bceeb442f2cbcb9c13cce086efa05045d949b71b49f31f751070884318b4a68065775840e9c768dd6
-SHA512 (container-selinux.tgz) = 5c0eaaf3f4e40bcb684a64f473d5abac8165881481fb647e5d37bb653f77e3b4c5da4708ec41c73e001c182023dbc5e381fd0f8730434681a248d9717975b7fa
+SHA512 (selinux-policy-d71265e.tar.gz) = 2edd7b54a715989f95aba334b72b06f037e37e28ed72116e8e84d5179d6bf55e0f3f3caf20d8c5c6d477358e99e8dc63de23f7122728b5b74aaff3e9189465e5
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 1cd098756d09e4cae219271e67fb709dcd6851db94b1539a15aa582cc8dfc3a186f5d84a216da97e8ec4986dc03ff60e001f5ca8b1dbc9247e08da949665da8a