/usr/share/modsecurity-crs/util/ is in modsecurity-crs 2.2.8-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/modsecurity-crs/util/README
/usr/share/modsecurity-crs/util/av-scanning/
/usr/share/modsecurity-crs/util/av-scanning/runAV/
/usr/share/modsecurity-crs/util/av-scanning/runAV/common.c
/usr/share/modsecurity-crs/util/av-scanning/runAV/common.h
/usr/share/modsecurity-crs/util/av-scanning/runAV/comp
/usr/share/modsecurity-crs/util/av-scanning/runAV/runAV-clamd.c
/usr/share/modsecurity-crs/util/av-scanning/runAV/runAV.c
/usr/share/modsecurity-crs/util/av-scanning/runav.pl
/usr/share/modsecurity-crs/util/browser-tools/
/usr/share/modsecurity-crs/util/browser-tools/js-overrides.js
/usr/share/modsecurity-crs/util/honeypot-sensor/
/usr/share/modsecurity-crs/util/honeypot-sensor/README.md
/usr/share/modsecurity-crs/util/honeypot-sensor/mlogc-honeypot-sensor.conf
/usr/share/modsecurity-crs/util/honeypot-sensor/modsecurity_crs_10_honeypot.conf
/usr/share/modsecurity-crs/util/regression-tests/
/usr/share/modsecurity-crs/util/regression-tests/INSTALL
/usr/share/modsecurity-crs/util/regression-tests/README
/usr/share/modsecurity-crs/util/regression-tests/modsecurity_crs_59_header_tagging.conf
/usr/share/modsecurity-crs/util/regression-tests/rulestest.conf
/usr/share/modsecurity-crs/util/regression-tests/rulestest.pl
/usr/share/modsecurity-crs/util/regression-tests/tests/
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_20_protocol_violations.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_21_protocol_anomalies.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_23_request_limits.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_30_http_policy.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_35_bad_robots.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_40_generic_attacks.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_41_sql_injection_attacks.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_41_xss_attacks.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/modsecurity_crs_50_outbound.tests
/usr/share/modsecurity-crs/util/regression-tests/tests/ruby.tests
/usr/share/modsecurity-crs/util/regression-tests/testserver.cgi
/usr/share/modsecurity-crs/util/rule-management/
/usr/share/modsecurity-crs/util/rule-management/id-range
/usr/share/modsecurity-crs/util/rule-management/remove-2.7-actions.pl
/usr/share/modsecurity-crs/util/rule-management/verify.rb
/usr/share/modsecurity-crs/util/virtual-patching/
/usr/share/modsecurity-crs/util/virtual-patching/arachni2modsec.pl
/usr/share/modsecurity-crs/util/virtual-patching/zap2modsec.pl