diff --git a/.gitignore b/.gitignore
index 30cc055..a62e07f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,4 @@
 /container-selinux-b430a71.tar.gz
 /container-selinux-0b666c4.tar.gz
 /container-selinux-7fe0136.tar.gz
+/container-selinux-dca3b87.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 930259e..ad1a2a4 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 7fe0136a943ef5428869ad930e5384b185ade39a
+%global commit0 dca3b870c4ee54ffd5703f32cd3a13365053ae2f
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.34
+Version: 2.35
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -118,6 +118,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon Nov 27 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.35-1
+- Allow container to map chr_files labeled container_file_t
+
 * Wed Nov 22 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.34-1
 - Dontaudit container processes getattr on kernel file systems
 
diff --git a/sources b/sources
index 67ca532..8fdbf39 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-7fe0136.tar.gz) = 93c80da31f8a6f4e333baed39d75f329467d3b4b9b499b486a2d635be62df072fedc28cd50c5cb005d4dbc2ae352d073b611b7d33b183c183f7ca551f307c39b
+SHA512 (container-selinux-dca3b87.tar.gz) = 8be0d2a16f834156591a4ce27daaf1ceda98ca769c8e6b3be20c9d591afc3349e153424fb503e496b404407f96fd422cb482adab54e920e1487c98dc4d1c4e0d