diff --git a/.gitignore b/.gitignore
index d0d771d..d4e0e69 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /container-selinux-513572d.tar.gz
+/container-selinux-bcdcb9a.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index baf9621..34de99e 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora}
-%global commit0 513572d0fff7899196d57721ed81577ee3dc8414
+%global commit0 bcdcb9a0aa3476e9f17fd383cf61a91921d7782c
 %else
 %global commit0 a85092bf995b99f26b9be7103345805f846f647c
 %endif
@@ -34,8 +34,8 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos}
 Epoch: 2
 %endif
-Version: 2.0
-Release: 2%{?dist}
+Version: 2.2
+Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -118,6 +118,10 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Fri Jan 06 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.2-1
+- bump to v2.2
+- additional labeling for ocid
+
 * Fri Jan 06 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.0-2
 - install policy at level 200
 - From: Dan Walsh <dwalsh@redhat.com>
diff --git a/sources b/sources
index 847f00c..dcdaf9e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-513572d.tar.gz) = b7510210a2d05a490f126df4a4452cc97871f24c7b72ce6f6bab5316ffa9b5bb9ca2a7b7f66bb94bc416b8da0f926e2ffb7c70f8b60c6b7db1d4556ad7b80822
+SHA512 (container-selinux-bcdcb9a.tar.gz) = 382ed177ac878e56a7a4819b30362f0f797657ae4b87847e624124d06e4f56463a44c8a4d0ba60ebe02bf53128b43ec5d0ce5a6f9e0d6450594a9cef60531806