diff --git a/.gitignore b/.gitignore
index 644c033..041a4e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -45,3 +45,4 @@
 /container-selinux-bdc0137.tar.gz
 /container-selinux-55c7d4d.tar.gz
 /container-selinux-d248f91.tar.gz
+/container-selinux-d213769.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index f677e2c..dabdc01 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 d248f9197acde3e7c489f2ee09c10f8b29ef1a68
+%global commit0 d2137698cba817ee241a02210b7d63473bd38233
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
@@ -36,8 +36,8 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.55
-Release: 12.git%{shortcommit0}%{?dist}
+Version: 2.58
+Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -127,6 +127,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Fri May 18 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.57-1
+- Add labels to allow podman to be run from a systemd unit file
+
 * Tue Apr 17 2018 Lokesh Mandvekar (Bot) <lsm5+bot@fedoraproject.org> - 2:2.55-12.gitd248f91
 - autobuilt commit d248f91
 
diff --git a/sources b/sources
index eb6df7c..480858b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-d248f91.tar.gz) = 28f7a36228581fce097f3c0a3798a727300f609dc927d976c4cf0d8c10834a3695503b1f340bc73ba86fdca4906cd12cf0c73804a40dfd1e99aecaa9e2bc3917
+SHA512 (container-selinux-d213769.tar.gz) = 94c3b6b097b9ad6b943bfec4b0d28d38a6fd10057b75c4236f03e52383361d1209d4c96acd02c2295707db037b26e5269eec5ead077bd90017518ea58fd5cc7a