What can AppArmor do?

[Richard Owlett <rowlett@cloud85.net>]

https://packages.debian.org/jessie/apparmor is uninformative.

It says:
"This provides the system initialization scripts needed to use 
the AppArmor Mandatory Access Control system, including the 
AppArmor Parser which is required to convert AppArmor text 
profiles into machine-readable policies that are loaded into the 
kernel for use with the AppArmor Linux Security Module."

There is a link to http://wiki.apparmor.net/index.php/Main_Page 
which gives no hints!

My application question.
1. If BrowserA and BrowserB are installed, can AppArmor prevent 
BrowserB from
   connecting to the internet independent of user permissions?
2. Can AppArmor default to preventing *ALL* but specific 
applications from
   connecting to the internet independent of user permissions?