i am delighted to see the above web page re: selinux.
i notice you mention that there is an effort underway to make
perhaps i should mention that it is utterly trivial to set up
a xen system with a guest domain running pretty much any kind
of kernel - including selinux enabled ones.
people who are not happy about using or waiting for uml-selinux
might want to consider either temporarily or permanently
utilising xen instead.
p.s. xen's a lot damn quicker, too. quick enough so that you can
seriously consider just doing apt-get update, blah blah.