The mountinfo denial is almost certainly just noise. You can plugs and connect ‘mount-observe’ if you want to be sure. You didn’t post security policy violations from journalctl, but since you mention that python module, you may want to look at: Python multiprocessing sem_open blocked in strict mode