From b8b4dcc57129810caab847a4701b2f9dfd728a80 Mon Sep 17 00:00:00 2001
From: Gitea <gitea@fake.local>
Date: Wed, 8 Nov 2023 12:27:58 +0100
Subject: [PATCH] committing changes in /etc after apt run

Package changes:
+ioquake3-server 1.36+u20221123.70d07d9+dfsg-1 amd64
---
 .etckeeper                                |  2 ++
 apparmor.d/local/usr.lib.ioquake3.ioq3ded |  0
 apparmor.d/usr.lib.ioquake3.ioq3ded       | 28 +++++++++++++++++++++++
 3 files changed, 30 insertions(+)
 create mode 100644 apparmor.d/local/usr.lib.ioquake3.ioq3ded
 create mode 100644 apparmor.d/usr.lib.ioquake3.ioq3ded

diff --git a/.etckeeper b/.etckeeper
index 5bfb64f7..d4a8e4fe 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -284,6 +284,7 @@ maybe chmod 0644 'apparmor.d/local/nvidia_modprobe'
 maybe chmod 0644 'apparmor.d/local/sbin.dhclient'
 maybe chmod 0644 'apparmor.d/local/usr.bin.freshclam'
 maybe chmod 0644 'apparmor.d/local/usr.bin.man'
+maybe chmod 0644 'apparmor.d/local/usr.lib.ioquake3.ioq3ded'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.clamd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.ntpd'
 maybe chmod 0644 'apparmor.d/local/usr.sbin.unbound'
@@ -315,6 +316,7 @@ maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d'
 maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local'
 maybe chmod 0644 'apparmor.d/usr.bin.freshclam'
 maybe chmod 0644 'apparmor.d/usr.bin.man'
+maybe chmod 0644 'apparmor.d/usr.lib.ioquake3.ioq3ded'
 maybe chmod 0644 'apparmor.d/usr.sbin.clamd'
 maybe chmod 0644 'apparmor.d/usr.sbin.mariadbd'
 maybe chmod 0644 'apparmor.d/usr.sbin.ntpd'
diff --git a/apparmor.d/local/usr.lib.ioquake3.ioq3ded b/apparmor.d/local/usr.lib.ioquake3.ioq3ded
new file mode 100644
index 00000000..e69de29b
diff --git a/apparmor.d/usr.lib.ioquake3.ioq3ded b/apparmor.d/usr.lib.ioquake3.ioq3ded
new file mode 100644
index 00000000..a506f2d9
--- /dev/null
+++ b/apparmor.d/usr.lib.ioquake3.ioq3ded
@@ -0,0 +1,28 @@
+# idTech3 server AppArmor profile
+# Copyright © 2016-2018 Simon McVittie
+# Copying and distribution of this file, with or without modification, are
+# permitted in any medium without royalty provided this notice is preserved.
+# This file is offered as-is, without any warranty.
+
+#include <tunables/global>
+
+profile ioq3ded /usr/lib/ioquake3/ioq3ded flags=(complain) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+  #include <abstractions/private-files-strict>
+
+  network inet dgram,
+  network inet stream,
+  network inet6 dgram,
+  network inet6 stream,
+
+  /etc/{openarena,quake3}-server/** r,
+  /usr/lib/{ioquake3,quake3,openarena,openarena-server}/{,**} mr,
+  /usr/share/games/{quake3*,openarena}/{,**} r,
+
+  owner @{HOME}/.{openarena,q3a}/{,**} rwk,
+  owner /var/games/{openarena,quake3}-server/** rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.lib.ioquake3.ioq3ded>
+}