Fix [CVE-2016-9962] Insecure opening of file-descriptor allows privilege
Fix BZ#1412148 – containerd: container did not start before the specified timeout

—-

use container-selinux >= 2:2.0-2