SELinux denies name_connect to mysql_port_t for tomcat_t

+++ This bug was initially created as a clone of Bug #1491747 +++
SELinux is denying tomcat from connecting to MySQL or MariaDB on port 3306, with the following AVC denial in the audit log:

type=AVC msg=audit(1505399902.845:357696): avc:  denied  { name_connect } for  pid=1168 comm="java" dest=3306 scontext=system_u:system_r:tomcat_t:s0 tcontext=system_u:object_r:mysqld_port_t:s0 tclass=tcp_socket

This worked without issue previously. This is likely the same problem as https://bugzilla.redhat.com/show_bug.cgi?id=1484572 , which reported this for MSSQL, but I'm not sure if that bug's fix will cover this, so I'm reporting here. Feel free to close this as a duplicate if appropriate.

Version of the SELinux policy RPMs is 3.13.1-166.el7_4.4