@pid_eins@grawity libpam doesn't itself link to libselinux, this is the pam_selinux module which is technically optional but configured by default pretty much everywhere
libselinux in Debian/Ubuntu is not linked against liblzma however (and why would a security library need compression hnnnngh)