Description of problem:
In case ftp_home_dir and use_nfs_home_dirs are ON and allow_ftpd_use_nfs is OFF vsftpd can access any nfs resource. I would say that allow_ftpd_use_nfs should have priority.

Version-Release number of selected component (if applicable):
selinux-policy-3.7.19-279.el6.noarch

How reproducible:
100%

Steps to Reproduce:
1. # sesearch -A -s ftpd_t -t nfs_t -C -c file

Actual results:
Found 4 semantic av rules:
DT allow ftpd_t nfs_t : file { ioctl read getattr lock open } ; [ allow_ftpd_use_nfs ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ allow_ftpd_use_nfs allow_ftpd_anon_write && ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ allow_ftpd_full_access ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ ftp_home_dir use_nfs_home_dirs && ]


Expected results:
Found 4 semantic av rules:
DT allow ftpd_t nfs_t : file { ioctl read getattr lock open } ; [ allow_ftpd_use_nfs ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ allow_ftpd_use_nfs allow_ftpd_anon_write && ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ allow_ftpd_full_access ]
DT allow ftpd_t nfs_t : file { ioctl read write create getattr setattr lock append unlink link rename open } ; [ allow_ftpd_use_nfs ftp_home_dir use_nfs_home_dirs && ]


Additional info:
This behavior can be observed also on selinux-policy-3.13.1-60.el7.noarch