diff --git a/.gitignore b/.gitignore
index dfbcd0a..a4d000c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,4 @@
 /container-selinux-de38c07.tar.gz
 /container-selinux-0620186.tar.gz
 /container-selinux-47e0448.tar.gz
+/container-selinux-b430a71.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 1990cdf..026fb14 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -3,7 +3,7 @@
 # container-selinux
 %global git0 https://github.com/projectatomic/container-selinux
 %if 0%{?fedora} || 0%{?rhel} > 7
-%global commit0 47e0448a47a97cddbb66fd35d8ae536f980307f1
+%global commit0 b430a71a44ce80364ff3ef95fa8134afb35d667e
 %else
 # use upstream's RHEL-1.12 branch for CentOS 7
 %global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
@@ -35,7 +35,7 @@ Name: container-selinux
 %if 0%{?fedora} || 0%{?centos} || 0%{?rhel} > 7
 Epoch: 2
 %endif
-Version: 2.31
+Version: 2.32
 Release: 1%{?dist}
 License: GPLv2
 URL: %{git0}
@@ -118,6 +118,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Wed Nov 8 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.32-1
+- Make sure users creating content in /var/lib with right labels
+
 * Thu Oct 26 2017 Dan Walsh <dwalsh@fedoraproject.org> - 2.31-1
 - Allow the container runtime to dbus chat with dnsmasq
 - add dontaudit rules for container trying to write to /proc
diff --git a/sources b/sources
index 18fd0d9..4e83c9e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (container-selinux-47e0448.tar.gz) = 675b11109c33a2e7ecfbf67828f80c4f7a7245605024f76394d4b55351de2d8f3009058f7842d6f20eb9845b5a0d56cb395c48f9e5387935b8ad973e342397fe
+SHA512 (container-selinux-b430a71.tar.gz) = 7b89826e64c26bc57b86345dc482bca56d12ab730e9965b53802e97ed572b169aea3daf89d4f50b88ffa3878da157e6165dd2294d537e59fe97fafed9db141dc