[Apparmor-general] How to configure apparmor to block *.inc to access from explorer

[Manu V]

Hi,
  I have some *.php pages and some *.inc pages. I want to configure
apparmor in such a way that, *.inc should be accessed by *.php only. If
some one tries to access *.inc from the explorer he should be blocked. 
Ex:
 index.php has welcome.inc file included. Index.php should be allowed to
access welcome.inc. If user tries to access welcome.inc from the
explorer, he should be blocked. At present he can see the source code of
welcome.inc.
Note: I know to configure in httpd.conf, but I would like to configure
this in apparmor.

--Manu