/usr/share/doc/ is in arno-iptables-firewall 2.0.1.d-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/doc/arno-iptables-firewall/
/usr/share/doc/arno-iptables-firewall/dsl-ppp-modem.CHANGELOG
/usr/share/doc/arno-iptables-firewall/README.Debian
/usr/share/doc/arno-iptables-firewall/traffic-accounting.CHANGELOG
/usr/share/doc/arno-iptables-firewall/rpc.CHANGELOG
/usr/share/doc/arno-iptables-firewall/transparent-proxy.CHANGELOG
/usr/share/doc/arno-iptables-firewall/ids-protection.CHANGELOG
/usr/share/doc/arno-iptables-firewall/nat-loopback.CHANGELOG
/usr/share/doc/arno-iptables-firewall/examples/
/usr/share/doc/arno-iptables-firewall/examples/adsl-failover.gz
/usr/share/doc/arno-iptables-firewall/copyright
/usr/share/doc/arno-iptables-firewall/linux-upnp-igd.CHANGELOG
/usr/share/doc/arno-iptables-firewall/ssh-brute-force-protection.CHANGELOG
/usr/share/doc/arno-iptables-firewall/transparent-dnat.CHANGELOG
/usr/share/doc/arno-iptables-firewall/dyndns-host-open.CHANGELOG
/usr/share/doc/arno-iptables-firewall/NEWS.Debian.gz
/usr/share/doc/arno-iptables-firewall/traffic-shaper.CHANGELOG
/usr/share/doc/arno-iptables-firewall/dmz-dnat.CHANGELOG
/usr/share/doc/arno-iptables-firewall/CHANGELOG-1.9-series.gz
/usr/share/doc/arno-iptables-firewall/mac-address-filter.CHANGELOG
/usr/share/doc/arno-iptables-firewall/multiroute.CHANGELOG
/usr/share/doc/arno-iptables-firewall/sip-voip.CHANGELOG
/usr/share/doc/arno-iptables-firewall/TODO.Debian
/usr/share/doc/arno-iptables-firewall/ipv6-over-ipv4.CHANGELOG
/usr/share/doc/arno-iptables-firewall/README.gz
/usr/share/doc/arno-iptables-firewall/pptp-vpn.CHANGELOG
/usr/share/doc/arno-iptables-firewall/outbound-snat.CHANGELOG
/usr/share/doc/arno-iptables-firewall/changelog.Debian.gz
/usr/share/doc/arno-iptables-firewall/ipsec-vpn.CHANGELOG