From ecb1760cbbdc370c09ef9f99be2e203135dbd1c0 Mon Sep 17 00:00:00 2001
From: Daniel J Walsh <dwalsh@redhat.com>
Date: Mon, 9 Oct 2017 13:29:39 +0000
Subject: [PATCH] Allow a container to umount a container_file_t filesystem

---
 .gitignore             | 1 +
 container-selinux.spec | 7 +++++--
 sources                | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index df07220..3661347 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,3 +20,4 @@
 /container-selinux-81ff96c.tar.gz
 /container-selinux-a9260d4.tar.gz
 /container-selinux-e37e93d.tar.gz
+/container-selinux-de38c07.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 46524c7..3a4c3df 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 e37e93dbe6cb058fc89c9c5de5ecd4c3be4354fb
+%global commit0 de38c07f355f6d885192ed974236a735be9e455c
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.27
+Version: 2.28
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -118,6 +118,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon Oct 9 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.28-1
+- Allow a container to umount a container_file_t filesystem
+
 * Fri Sep 22 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.27-1
 -  Allow container runtimes to work with the netfilter sockets
 -  Allow container_file_t to be an entrypoint for VM's
diff --git a/sources b/sources
index 9baaa72..5829058 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-e37e93d.tar.gz) = faf644a4a13c0ffa1198d798390147f815d90aa27ca9af49df71575da1be8678bcbe12f0281f83b345945a29330c10df7c86f79f6862829902f71dc7e7431058
+SHA512 (container-selinux-de38c07.tar.gz) = bada050900ceb4972ee75330a5ca6de49561c208f15b669261f8f028b0783bc1cf5cc64e9c6e6fa79c7988ccec001e8084b10e04683ccd3c414c4b0ad53c651b