committing changes in /etc after apt run

Package changes:
+ioquake3-server 1.36+u20221123.70d07d9+dfsg-1 amd64

.etckeeper

@@ -284,6 +284,7 @@ maybe chmod 0644 'apparmor.d/local/nvidia_modprobe'
 maybe chmod 0644 'apparmor.d/local/sbin.dhclient'
 maybe chmod 0644 'apparmor.d/local/usr.bin.freshclam'
 maybe chmod 0644 'apparmor.d/local/usr.bin.man'
+maybe chmod 0644 'apparmor.d/local/usr.lib.ioquake3.ioq3ded'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.clamd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.ntpd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.unbound'
@@ -315,6 +316,7 @@ maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local'
 maybe chmod 0644 'apparmor.d/usr.bin.freshclam'
 maybe chmod 0644 'apparmor.d/usr.bin.man'
+maybe chmod 0644 'apparmor.d/usr.lib.ioquake3.ioq3ded'
 maybe chmod 0644 'apparmor.d/usr.sbin.clamd'
 maybe chmod 0644 'apparmor.d/usr.sbin.mariadbd'
 maybe chmod 0644 'apparmor.d/usr.sbin.ntpd'

apparmor.d/usr.lib.ioquake3.ioq3ded

@@ -0,0 +1,28 @@
+# idTech3 server AppArmor profile
+# Copyright © 2016-2018 Simon McVittie
+# Copying and distribution of this file, with or without modification, are
+# permitted in any medium without royalty provided this notice is preserved.
+# This file is offered as-is, without any warranty.
+
+#include <tunables/global>
+
+profile ioq3ded /usr/lib/ioquake3/ioq3ded flags=(complain) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+  #include <abstractions/private-files-strict>
+
+  network inet dgram,
+  network inet stream,
+  network inet6 dgram,
+  network inet6 stream,
+
+  /etc/{openarena,quake3}-server/** r,
+  /usr/lib/{ioquake3,quake3,openarena,openarena-server}/{,**} mr,
+  /usr/share/games/{quake3*,openarena}/{,**} r,
+
+  owner @{HOME}/.{openarena,q3a}/{,**} rwk,
+  owner /var/games/{openarena,quake3}-server/** rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.lib.ioquake3.ioq3ded>
+}