Comment 5 for bug 1655982

So the first kernel tried may have had the flock mediation patch. It was in
  4.4.0-67.88

Reverted in
  4.4.0-70.91

which would help explain the switch in denial from
  file_mmap rm

to
  file_mprotect r

I am unsure why the request for mprotect is showing up. At this point we need to start stracing the application