diff --git a/.gitignore b/.gitignore
index 794e800..5a95dfc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -75,3 +75,4 @@
 /container-selinux-21c2be6.tar.gz
 /container-selinux-5e1f62f.tar.gz
 /container-selinux-ec6fcad.tar.gz
+/container-selinux-eb60838.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 9128f3e..24f448c 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
-%global commit0 5e1f62fe319ebbef46bcabc8cc5e22d209411dda
+%global commit0 eb60838b8e9b88aeb1c3a7f68c93ccfd8a67fbdd
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -26,8 +26,8 @@ Name: container-selinux
 %if 0%{?fedora}
 Epoch: 2
 %endif
-Version: 2.82
-Release: 2.git%{shortcommit0}%{?dist}
+Version: 2.84
+Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -109,6 +109,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Thu Feb 28 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.84-1
+- More allow rules to allow containers to run within containers
+
 * Tue Feb 26 2019 Lokesh Mandvekar (Bot) <lsm5+bot@fedoraproject.org> - 2:2.82-2.git5e1f62f
 - bump to 2.82
 - autobuilt 5e1f62f
diff --git a/sources b/sources
index e46329b..c285974 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-5e1f62f.tar.gz) = 8184e4191cbce80e8ecf65f82e64f6b85eeda0b7b958be099b97100aaa78c71e3d0adec642eafb7e58037ba0a5b0452da7674d7e6c02a8f3c125f67629425ea7
+SHA512 (container-selinux-eb60838.tar.gz) = b4a4ae04d48de49dac9d588be5efc7abfaee7a8a82dd6186f51485e1e63a857fa84145a75aef265bbf66a089d818619b912f6a27bba064c45758dd15ae3fde44