While I used Apache as an example here I have configured a policy to protect a php application with known vulnerabilities which was prevented.

If you wish you could go install a docker image for a honeypot and then build policies with selinux to confirm yourself.