fnmatch.fnmatch signature is path, pattern, we were passing arguments in reverse order, so effectively we were only checking executable files. Several .so are executable, so we were checking many .so anyway.