/etc/java-11-openjdk/security/ is in openjdk-11-jre-headless 10.0.1+10-3ubuntu1.
This file is owned by root:root, with mode 0o755.
..
/etc/java-11-openjdk/security/blacklisted.certs
/etc/java-11-openjdk/security/default.policy
/etc/java-11-openjdk/security/java.policy
/etc/java-11-openjdk/security/java.security
/etc/java-11-openjdk/security/nss.cfg
/etc/java-11-openjdk/security/policy/
/etc/java-11-openjdk/security/policy/README.txt
/etc/java-11-openjdk/security/policy/limited/
/etc/java-11-openjdk/security/policy/limited/default_US_export.policy
/etc/java-11-openjdk/security/policy/limited/default_local.policy
/etc/java-11-openjdk/security/policy/limited/exempt_local.policy
/etc/java-11-openjdk/security/policy/unlimited/
/etc/java-11-openjdk/security/policy/unlimited/default_US_export.policy
/etc/java-11-openjdk/security/policy/unlimited/default_local.policy