Comment # 3 on bug 1065388 from Dr. Werner Fink

Created attachment 746170 [details]
/var/log/audit/audit.log

(In reply to Christian Boltz from comment #2)
> Can you please
> - switch the profile into complain/learning mode:
>       aa-complain /etc/apparmor.d/usr.bin.lessopen.sh
> - repeat the previously forbidden/failing things - complain mode means to
> allow 
>   everything and log what would be denied, so everything should work now
> - attach your /var/log/audit/audit.log (if you don't have auditd running,
> syslog,
>   journal or dmesg output are alternatives - grep for "apparmor")
> - finally switch the profile back to enforce mode
>       aa-enforce /etc/apparmor.d/usr.bin.lessopen.sh
> 
> As an alternative, you can also run   aa-logprof   to update the profile
> yourself. In this case, please tell me which rules you needed to add.

Here we are