diff --git a/container-selinux.spec b/container-selinux.spec
index 80f30fd..d1bbe28 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -5,7 +5,8 @@
 %if 0%{?fedora}
 %global commit0 bcdcb9a0aa3476e9f17fd383cf61a91921d7782c
 %else
-%global commit0 a85092bf995b99f26b9be7103345805f846f647c
+# use upstream's RHEL-1.12 branch for CentOS 7
+%global commit0 56c32da8a72f9e7af5daeaebac5b887830d123b1
 %endif
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
@@ -35,7 +36,7 @@ Name: container-selinux
 Epoch: 2
 %endif
 Version: 2.2
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: GPLv2
 URL: %{git0}
 Summary: SELinux policies for container runtimes
@@ -117,6 +118,9 @@ fi
 %{_datadir}/selinux/*
 
 %changelog
+* Wed Jan 11 2017 Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:2.2-4
+- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7
+
 * Tue Jan 10 2017 Jonathan Lebon <jlebon@redhat.com> - 2:2.2-3
 - properly disable docker module in %post