/usr/share/php/Symfony/ is in php-symfony-security-csrf 3.4.6+dfsg-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/php/Symfony/Component/
/usr/share/php/Symfony/Component/Security/
/usr/share/php/Symfony/Component/Security/Csrf/
/usr/share/php/Symfony/Component/Security/Csrf/CsrfToken.php
/usr/share/php/Symfony/Component/Security/Csrf/CsrfTokenManager.php
/usr/share/php/Symfony/Component/Security/Csrf/CsrfTokenManagerInterface.php
/usr/share/php/Symfony/Component/Security/Csrf/Exception/
/usr/share/php/Symfony/Component/Security/Csrf/Exception/TokenNotFoundException.php
/usr/share/php/Symfony/Component/Security/Csrf/TokenGenerator/
/usr/share/php/Symfony/Component/Security/Csrf/TokenGenerator/TokenGeneratorInterface.php
/usr/share/php/Symfony/Component/Security/Csrf/TokenGenerator/UriSafeTokenGenerator.php
/usr/share/php/Symfony/Component/Security/Csrf/TokenStorage/
/usr/share/php/Symfony/Component/Security/Csrf/TokenStorage/NativeSessionTokenStorage.php
/usr/share/php/Symfony/Component/Security/Csrf/TokenStorage/SessionTokenStorage.php
/usr/share/php/Symfony/Component/Security/Csrf/TokenStorage/TokenStorageInterface.php
/usr/share/php/Symfony/Component/Security/Csrf/autoload.php