From Debian package 0.2.20100524-1

Exempt unconfined_u subjects from UBAC constraints

Index: policy/constraints
===================================================================
--- policy/constraints.orig
+++ policy/constraints
@@ -28,7 +28,7 @@
 define(`basic_ubac_conditions',`
 	ifdef(`enable_ubac',`
 		u1 == u2
-		or u1 == system_u
+		or u1 == system_u or u1 == unconfined_u
 		or u2 == system_u
 		or t1 != ubac_constrained_type
 		or t2 != ubac_constrained_type