MODS: Please delete this message.
In my testing, I had left SELinux on permissive. So of course what I was trying to do unexpectedly worked.
Once set to enforcing, the system worked as expected - it denied access as it should.
Program Lead at Arizona's first Red Hat Academy, est. 2005
Estrella Mountain Community College