diff --git a/add-firewalld-fc.patch b/add-firewalld-fc.patch
new file mode 100644
index 0000000000000000000000000000000000000000..524cd2ccd7d58f1038401fbd75e865fa06e2beb0
--- /dev/null
+++ b/add-firewalld-fc.patch
@@ -0,0 +1,12 @@
+diff -uprN selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c.orig/policy/modules/contrib/firewalld.fc selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c/policy/modules/contrib/firewalld.fc
+--- selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c.orig/policy/modules/contrib/firewalld.fc	2020-09-03 14:43:46.690880806 +0200
++++ selinux-policy-9c84d687e0fef5d8e4e25273bd25f58c28a7c67c/policy/modules/contrib/firewalld.fc	2020-09-10 17:25:25.126199087 +0200
+@@ -6,6 +6,8 @@
+ 
+ /usr/sbin/firewalld	--	gen_context(system_u:object_r:firewalld_exec_t,s0)
+ 
++/usr/share/firewalld/firewalld-tmp-mmap	--	gen_context(system_u:object_r:firewalld_tmp_t,s0)
++
+ /var/log/firewalld.*	--	gen_context(system_u:object_r:firewalld_var_log_t,s0)
+ 
+ /var/run/firewalld(/.*)?	gen_context(system_u:object_r:firewalld_var_run_t,s0)
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 040b590966a995bda261b3337e33c0260917dbe4..8a757112b781805547a9bd5d7743aa5e72a77e69 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 3.14.2
-Release: 60
+Release: 61
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -67,6 +67,7 @@ Patch14: add_userman_access_run_dir.patch
 Patch15: allow-systemd-machined-create-userdbd-runtime-sock-file.patch
 Patch16: allow-systemd_machined_t-delete-userdbd-runtime-sock.patch
 Patch17: allow-systemd-hostnamed-and-logind-read-policy.patch
+Patch18: add-firewalld-fc.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -732,6 +733,9 @@ exit 0
 %endif
 
 %changelog
+* Thu Sep 24 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-61
+- add add-firewalld-fc.patch
+
 * Thu Sep 22 2020 openEuler Buildteam <buildteam@openeuler.org> - 3.14.2-60
 - add allow-systemd-hostnamed-and-logind-read-policy.patch