diff --git a/.gitignore b/.gitignore
index 52b3488..af84127 100644
--- a/.gitignore
+++ b/.gitignore
@@ -78,3 +78,4 @@
 /container-selinux-eb60838.tar.gz
 /container-selinux-92af7fd.tar.gz
 /container-selinux-c178849.tar.gz
+/container-selinux-891a85f.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 4b74727..2bdae1d 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
-%global commit0 c1788491847627d39266b5b22e85c8b094f76d77
+%global commit0 891a85fee0f55ea32100c3f47a273ea522f4f2fc
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -26,8 +26,8 @@ Name: container-selinux
 %if 0%{?fedora}
 Epoch: 2
 %endif
-Version: 2.86
-Release: 1.git%{shortcommit0}%{?dist}
+Version: 2.87
+Release: 2.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -109,6 +109,10 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Sat Mar 02 2019 Lokesh Mandvekar (Bot) <lsm5+bot@fedoraproject.org> - 2:2.87-2.git891a85f
+- bump to 2.87
+- autobuilt 891a85f
+
 * Fri Mar 1 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.86-1
 - Allow unconfined user and services to dyntrans to container domains, needed for CRIU
 - Allow containers exectue hugetlb files.
diff --git a/sources b/sources
index 81063d9..c157f0b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-c178849.tar.gz) = cb5234b21c61236d81ea8532629633f5a635496c70c20d6969f303ab476adaec3e64d67f8eb56c3ae1672698486281679fe8b4c6dda3c3f80556df317c23ff48
+SHA512 (container-selinux-891a85f.tar.gz) = e5f0830be87495313658e7d18a6d7a2b11ed5d03dd6e57631b07e79c07baa7b100dbac675fb86e68ad1e95b2418e2f4bef378341d2df4ddd3e3ff35b92f92e21