Comment # 2 on bug 1065388 from Christian Boltz

Can you please
- switch the profile into complain/learning mode:
      aa-complain /etc/apparmor.d/usr.bin.lessopen.sh
- repeat the previously forbidden/failing things - complain mode means to allow 
  everything and log what would be denied, so everything should work now
- attach your /var/log/audit/audit.log (if you don't have auditd running,
syslog,
  journal or dmesg output are alternatives - grep for "apparmor")
- finally switch the profile back to enforce mode
      aa-enforce /etc/apparmor.d/usr.bin.lessopen.sh

As an alternative, you can also run   aa-logprof   to update the profile
yourself. In this case, please tell me which rules you needed to add.