diff --git a/.gitignore b/.gitignore
index 790d38d..78abd50 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,3 +42,4 @@
 /container-selinux-663e003.tar.gz
 /container-selinux-fd7d508.tar.gz
 /container-selinux-fd50128.tar.gz
+/container-selinux-bdc0137.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 031ee58..e6a21af 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 fd5012800ea530d629af7e0290066002e17ac054
+%global commit0 bdc0137288e5fe3616c32cd0a02de9aee1503897
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.51
+Version: 2.52
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -117,6 +117,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Thu Mar 8 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.52-1
+- Add rules for container domains to make writing custom policy easier
+
 * Thu Mar 8 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.51-1
 - Allow shell_exec_t as a container_runtime_t entrypoint
 
diff --git a/sources b/sources
index 5557ec4..49bd965 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-fd50128.tar.gz) = 9f2b4a3e16bf31931488813ffb7167621836ab555657a21f29af07f9ebefa04e0cc50eaa2a25a3fd817799656023bdcf3b137f81aff98b2a1c0ba1e887529766
+SHA512 (container-selinux-bdc0137.tar.gz) = 011891936937ad62122f4026e4247d8dbb3ae7c9317d37e419438924e8c4f37d9092f5f3739cd9ca9de526445c4a7a147a956646c852ef1abd9e4f456e77594b