diff --git a/.gitignore b/.gitignore
index f1c24b4..4a0928d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@
 /buildah-f7dc659.tar.gz
 /buildah-de0fb93.tar.gz
 /buildah-b7e3320.tar.gz
+/buildah-bf40000.tar.gz
diff --git a/buildah.spec b/buildah.spec
index 82a2cfe..77c43c7 100644
--- a/buildah.spec
+++ b/buildah.spec
@@ -21,11 +21,11 @@
 # https://github.com/projectatomic/buildah
 %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
 %global import_path     %{provider_prefix}
-%global commit         b7e3320fe487ddaa859506df991c365ff2737870
+%global commit         bf40000e72b351067ebae7b77d212a200f9ce051
 %global shortcommit    %(c=%{commit}; echo ${c:0:7})
 
 Name:           buildah
-Version:        0.7
+Version:        0.8
 Release:        1.git%{shortcommit}%{?dist}
 Summary:        A command line tool used for creating OCI Images
 License:        ASL 2.0
@@ -91,6 +91,10 @@ make DESTDIR=%{buildroot} PREFIX=%{_prefix} install install.completions
 %{_datadir}/bash-completion/completions/buildah
 
 %changelog
+* Thu Nov 16 2017 Dan Walsh <dwalsh@redhat.com> 0.8-1
+- Buildah bud was failing on SELinux machines, this fixes this
+- Block access to certain kernel file systems inside of the container
+
 * Thu Nov 16 2017 Dan Walsh <dwalsh@redhat.com> 0.7-1
 - Ignore errors when trying to read containers buildah.json for loading SELinux reservations
 -     Use credentials from kpod login for buildah
diff --git a/sources b/sources
index 9ef659b..492e4a5 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (buildah-b7e3320.tar.gz) = 021e5f47068b3d7aafbf9563aa0f2f28b7d2bfdcb885d8ba052705d883a543a8d407fa70b6b840c10c9b81d778a49842fd7b4396a0431a0d8f02e711b1bc81b3
+SHA512 (buildah-bf40000.tar.gz) = a956a0e316e8febbd5554de94f6cf4f9ecd3f09972e442486d2b6c67018fea47d4c8a2586e70ff404343b94b106a123302c09506121804f5ddc00b2770b6e7de