diff --git a/.gitignore b/.gitignore
index f607f56..c64135c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,3 +13,4 @@
 /container-selinux-9027f8e.tar.gz
 /container-selinux-ed3082b.tar.gz
 /container-selinux-5212fea.tar.gz
+/container-selinux-a80afba.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 565136d..996ee3a 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora}
-%global commit0 5212fea857a5296e1d22b3ac6b875eb59a86ebe7
+%global commit0 a80afba083834209e5683c8e0320734a4d9d0b64
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos}
 Epoch: 2
 %endif
-Version: 2.18
+Version: 2.19
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -118,6 +118,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Mon Jun 12 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.19-1
+- Allow containers to create tun sockets
+
 * Tue Jun 6 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.18-1
 - Fix labeling for CRI-O files in overlay subdirs
 
diff --git a/sources b/sources
index 0f81251..a3045ce 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-5212fea.tar.gz) = 3a796527dfbc1b0ad0b05f7db1a4342ffa8802cbb7778310e6b49f433e8bc5bd0b8fbe7240bff204cfde2169143bd1ad46002368e8a1c9b711f0e8b1ecacecd6
+SHA512 (container-selinux-a80afba.tar.gz) = 41e7c18cd221113799495d9ca93bbc2844795be5a39e62c16fc07956f6b36cc52ed6d49f2837aae268ad4356f96458835a57d57e72d5dcdb9e978095a0c96d38