Add support to nnp_transition for container domains

Eliminates need for typebounds.

.gitignore

@@ -33,3 +33,4 @@
 /container-selinux-26c642a.tar.gz
 /container-selinux-96e58bf.tar.gz
 /container-selinux-599072a.tar.gz
+/container-selinux-231b213.tar.gz

container-selinux.spec

@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 599072a930b995ba13ca7a4a6add7e808aa9b01f
+%global commit0 231b213555c3a3d38dcfa69c854ab95d1c8bf6eb
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.40
+Version: 2.41
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -117,6 +117,10 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Tue Jan 9 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.41-1
+- Add support to nnp_transition for container domains
+- Eliminates need for typebounds.
+
 * Tue Jan 9 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.40-1
 - Allow container_runtime_t to use user ttys
 - Fixes bounds check for container_t

sources

@@ -1 +1 @@
-SHA512 (container-selinux-599072a.tar.gz) = d3b21648444c83623b952ce08e4317f1400c6e2ed54923512e6e8fafdf2abd539d85d4e1e5c9f19144666bb2792ca991a3f77f6f7e9b927a5869c4be16324684
+SHA512 (container-selinux-231b213.tar.gz) = be907960062135a71d82921b51b53e9fdbdd7db85200e511487469215cec014aa253b49525098282d817808d4862b2de46f0df0314811de70b6bb82a711cc9eb