diff --git a/src/docker.js b/src/docker.js
index 4b55a8926..5ce9e15f1 100644
--- a/src/docker.js
+++ b/src/docker.js
@@ -205,7 +205,7 @@ function createSubcontainer(app, name, cmd, options, callback) {
                 NetworkMode: isAppContainer ? 'cloudron' : ('container:' + app.containerId), // share network namespace with parent
                 Dns: ['172.18.0.1'], // use internal dns
                 DnsSearch: ['.'], // use internal dns
-                SecurityOpt: enableSecurityOpt ? [ "apparmor:docker-cloudron-app" ] : null // profile available only on cloudron
+                SecurityOpt: enableSecurityOpt ? [ "apparmor=docker-cloudron-app" ] : null // profile available only on cloudron
             }
         };
         containerOptions = _.extend(containerOptions, options);