Comment 7 for bug 876994

Ok, I can confirm that Marc is right.

I was using a kernel.org kernel when I ran the tests initially, so I did not run into yama.
I shall edit my initial post to note this.

If I use the default Ubuntu kernel for my Oneiric :

unpriv-user$ ln -s /etc/file_to_create /var/lock/selinux-relabel

root@machine:~# /etc/init.d/selinux start
 * Starting SELinux autorelabel
/usr/bin/touch: cannot touch `/var/lock/selinux-relabel': Permission denied

root@machine:~# uname -r
2.6.38-8-generic-pae

root@machine:/proc/sys/kernel/yama# cat protected_sticky_symlinks
1

If however protected_sticky_symlinks is turned set to 0, then the link is followed, so it seems prudent to fix it anyway.