Comment 1 for bug 1233071

@{CLICK_DIR}/@{APP_PKGNAME}/@{APP_VERSION} corresponds to the install directory of the click app, so using @{CLICK_DIR}/@{APP_PKGNAME}/@{APP_VERSION}/locale is just fine from a security POV and wrt apparmor policy.

That said, upstream click has been clear that people should not hard code paths to the @{CLICK_DIR} because @{CLICK_DIR} is configurable and subject to change. I'm not sure what the solution is-- though I can say that both upstart-app-launch and aa-exec-click will chdir to the install directory (the Path= in the .desktop file), so perhaps a relative path can be used instead. I suggest talking to the click team for input.