* Fri Sep 22 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-283.4
    - Allow init noatsecure httpd_t
    - Allow mysqld_t domain to mmap mysqld db files. BZ(1483331)
    - Merge branch 'f27' of github.com:fedora-selinux/selinux-policy-contrib into f27
    - Allow tomcat to setsched
    - Merge pull request #29 from martinezjavier/f27-qemu-tpm
    - Allow virtual machines to access TPM devices. BZ(1492635)
    - Fix rules blocking ipa-server upgrade process
    - Add new boolean tomcat_read_rpm_db()
    - Allow tomcat to connect on mysqld tcp ports
    - Add new interface apache_delete_tmp()
    - Add interface fprintd_exec()
    - Add interface fprintd_mounton_var_lib()
    - Allow mozilla plugin to mmap video devices BZ(1492580)
    - Add ctdbd_t domain sys_source capability and allow setrlimit
    - Allow unconfined_t domain to create new users with proper SELinux lables BZ(1494108)
    -  Allow init noatsecure httpd_t
    - Label tcp port 3269 as ldap_port_t
    - Allow systemd-logind to use ypbind
    - Allow systemd to remove apache tmp files
    - Allow ldconfig domain to mmap ldconfig cache files
    - Allow systemd to exec fprintd BZ(1491808)
    - Allow systemd to mounton fprintd lib dir