Cannot exec 'hooks/pre-receive': permission denied

When pushing to my repo I get the following error. Pulling works, so authentication in general is ok.
The gitea logs don’t seem to show something related to this. Where can I start to search for the cause of this?

LANG=C git push
Enumerating objects: 6, done.
Counting objects: 100% (6/6), done.
Delta compression using up to 16 threads
Compressing objects: 100% (5/5), done.
Writing objects: 100% (5/5), 2.52 KiB | 2.52 MiB/s, done.
Total 5 (delta 0), reused 0 (delta 0), pack-reused 0
fatal: cannot exec ‘hooks/pre-receive’: Permission denied

! [remote rejected] master → master (pre-receive hook declined)
error: failed to push some refs to …’

A last straw was app-armour and that was it.
Looks like I need to tweak the profile.