diff --git a/policycoreutils-sandbox-python3.patch b/policycoreutils-sandbox-python3.patch
new file mode 100644
index 0000000..317b8e4
--- /dev/null
+++ b/policycoreutils-sandbox-python3.patch
@@ -0,0 +1,10 @@
+diff --git a/policycoreutils/sandbox/start b/policycoreutils/sandbox/start
+index e0a0c2c..cdc4a3e 100644
+--- a/policycoreutils/sandbox/start
++++ b/policycoreutils/sandbox/start
+@@ -1,4 +1,4 @@
+-#! /usr/bin/python -Es
++#! /usr/bin/python3 -Es
+ import subprocess, sys
+ rc = [-1,'']
+ try:
diff --git a/policycoreutils.spec b/policycoreutils.spec
index c36490e..a203dea 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -9,7 +9,7 @@
 Summary: SELinux policy core utilities
 Name:	 policycoreutils
 Version: 2.5
-Release: 14%{?dist}
+Release: 15%{?dist}
 License: GPLv2
 Group:	 System Environment/Base
 # https://github.com/SELinuxProject/selinux/wiki/Releases
@@ -32,6 +32,7 @@ Patch:	 policycoreutils-fedora.patch
 # $ VERSION=1.2.3 ./make-fedora-selinux-patch.sh sepolgen
 Patch1:  sepolgen-fedora.patch
 Patch100: policycoreutils-fix-semanage-python3.patch
+Patch101: policycoreutils-sandbox-python3.patch
 Obsoletes: policycoreutils < 2.0.61-2
 Conflicts: filesystem < 3, selinux-policy-base < 3.13.1-138
 # initscripts < 9.66 shipped fedora-autorelabel services which are renamed to selinux-relabel
@@ -68,6 +69,7 @@ to switch roles.
 %patch -p0 -b .policycoreutils-fedora
 pushd policycoreutils-2.5
 %patch100 -p2 -b .semanage-python3
+%patch101 -p2 -b .sandbox-python3
 popd
 
 cp %{SOURCE3} policycoreutils-2.5/gui/
@@ -434,6 +436,9 @@ The policycoreutils-restorecond package contains the restorecond service.
 %systemd_postun_with_restart restorecond.service
 
 %changelog
+* Thu Jul 21 2016 Petr Lautrbach <plautrba@redhat.com> 2.5-15
+- Fix sandbox -X issue related to python3 (#1358138)
+
 * Wed Jul 20 2016 Richard W.M. Jones <rjones@redhat.com> - 2.5-14
 - Use generator approach to fix autorelabel