diff --git a/.gitignore b/.gitignore
index 3605338..75b3c4a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -53,3 +53,6 @@
 /container-selinux-284f9e7.tar.gz
 /container-selinux-d346375.tar.gz
 /container-selinux-bf5b26b.tar.gz
+/container-selinux-dfaf8fd.tar.gz
+/container-selinux-8ecc282.tar.gz
+/container-selinux-0407867.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 85a962f..fd24d7a 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 8ecc282b93f70c91e6cfc23e5ddbe55a2628eaf8
+%global commit0 04078674cd4f0125a2a650ca750ca9c3ca3529b9
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
@@ -36,7 +36,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.66
+Version: 2.67
 Release: 1.git%{shortcommit0}%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -127,6 +127,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Fri Jul 6 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.67-1
+- Add policy for container_logreader_t
+
 * Sat Jun 30 2018 Dan Walsh <dwalsh@fedoraproject.org> - 2.66-1
 - Allow container runtimes to dbus chat with systemd-resolved
 
diff --git a/sources b/sources
index 135dda2..b6f276e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-8ecc282.tar.gz) = db120dceb1db050aa906f1fbc74a0c541345880e8c1eccf65355f1ce640c59e0493a025a3ab6c6b7c7ac385160694a0b23612572791412eb9d11eebe4da5460a
+SHA512 (container-selinux-0407867.tar.gz) = e72b17bd3e43538c4ea28361572a5a81316566183b1511d5ad5c03d3afc9b75840f3aecad74b13643d338b89e1c9605ae2b7ca61fae5a95626dac6e1bc0455d6