Applications declare an apparmor hook in their click manifest (required for !AppStore acceptance). During installation of the click app, the click-apparmor hook is run and an AppArmor profile is created specifically for the application. The !AppArmor profile name is intentionally the same as the [[../ApplicationId|ApplicationId]] (ie, "$(click package)_$(application)_$(version)").

The [[https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest#Click|security team's specification on the click manifest]] describes this in detail.