diff --git a/.gitignore b/.gitignore
index 52b3488..4d3f6eb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -78,3 +78,4 @@
 /container-selinux-eb60838.tar.gz
 /container-selinux-92af7fd.tar.gz
 /container-selinux-c178849.tar.gz
+/container-selinux-2521d0d.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 4b74727..850dc4c 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -2,7 +2,7 @@
 
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
-%global commit0 c1788491847627d39266b5b22e85c8b094f76d77
+%global commit0 2521d0d6082ea9057d827d257d27291bf6219aba
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # container-selinux stuff (prefix with ds_ for version/release etc.)
@@ -26,7 +26,7 @@ Name: container-selinux
 %if 0%{?fedora}
 Epoch: 2
 %endif
-Version: 2.86
+Version: 2.89
 Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -109,6 +109,11 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Sat Mar 9 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.89-1
+- Allow all container domains to have container file types entrypoint
+- Add new release to fix issues with udica
+- Allow container_runtime_t to dyntransition to container domains
+
 * Fri Mar 1 2019 Dan Walsh <dwalsh@fedoraproject.org> - 2.86-1
 - Allow unconfined user and services to dyntrans to container domains, needed for CRIU
 - Allow containers exectue hugetlb files.
diff --git a/sources b/sources
index 81063d9..c9c3a02 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-c178849.tar.gz) = cb5234b21c61236d81ea8532629633f5a635496c70c20d6969f303ab476adaec3e64d67f8eb56c3ae1672698486281679fe8b4c6dda3c3f80556df317c23ff48
+SHA512 (container-selinux-2521d0d.tar.gz) = 316c85c5b7d061d7691047f09c721dd85fd65ed306991b8c49b2ba4aa88d25ed8ef68a8a8d8a38d331066beab79918253df93e7daf246d5de7bb76741e082115