diff --git a/add-firewalld-fc.patch b/add-firewalld-fc.patch
new file mode 100644
index 0000000000000000000000000000000000000000..1a6e1c6eb1f700495da31d93ca6f24dba756d77c
--- /dev/null
+++ b/add-firewalld-fc.patch
@@ -0,0 +1,12 @@
+diff -uprN selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c.orig/policy/modules/contrib/firewalld.fc selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c/policy/modules/contrib/firewalld.fc
+--- selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c.orig/policy/modules/contrib/firewalld.fc	2020-09-03 14:43:46.690880806 +0200
++++ selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c/policy/modules/contrib/firewalld.fc	2020-09-03 14:48:30.958874940 +0200
+@@ -6,6 +6,8 @@
+ 
+ /usr/sbin/firewalld	--	gen_context(system_u:object_r:firewalld_exec_t,s0)
+ 
++/usr/share/firewalld/firewalld-tmp-mmap --      gen_context(system_u:object_r:firewalld_tmp_t,s0)
++
+ /var/log/firewalld.*	--	gen_context(system_u:object_r:firewalld_var_log_t,s0)
+ 
+ /var/run/firewalld(/.*)?	gen_context(system_u:object_r:firewalld_var_run_t,s0)
diff --git a/selinux-policy.spec b/selinux-policy.spec
index bd5444bba9011add0d1b1555490cc8a919418a2a..943a6269895d9ffcc05bf83913f439cc5c44c2a7 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 57
+Release: 58
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -64,6 +64,7 @@ Patch11: add-avc-for-systemd-hostnamed-and-systemd-logind.patch
 Patch12: add-avc-for-systemd.patch
 Patch13: allow-systemd-to-mount-unlabeled-filesystemd.patch
 Patch14: add_userman_access_run_dir.patch
+Patch15: add-firewalld-fc.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -729,6 +730,9 @@ exit 0
 %endif
 
 %changelog
+* Thu Sep 03 2020 Roberto Sassu <roberto.sassu@huawei.com> - 3.14.2-58
+- add patch add-firewalld-fc.patch
+
 * Fri Aug 28 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-57
 - add add_userman_access_run_dir.patch