/usr/share/ipa/updates/ is in freeipa-server 4.7.0~pre1+git20180411-2ubuntu2.
This file is owned by root:root, with mode 0o755.
..
/usr/share/ipa/updates/05-pre_upgrade_plugins.update
/usr/share/ipa/updates/10-config.update
/usr/share/ipa/updates/10-enable-betxn.update
/usr/share/ipa/updates/10-ipapwd.update
/usr/share/ipa/updates/10-rootdse.update
/usr/share/ipa/updates/10-selinuxusermap.update
/usr/share/ipa/updates/10-uniqueness.update
/usr/share/ipa/updates/19-managed-entries.update
/usr/share/ipa/updates/20-aci.update
/usr/share/ipa/updates/20-default_password_policy.update
/usr/share/ipa/updates/20-dna.update
/usr/share/ipa/updates/20-enable_dirsrv_plugins.update
/usr/share/ipa/updates/20-host_nis_groups.update
/usr/share/ipa/updates/20-idoverride_index.update
/usr/share/ipa/updates/20-indices.update
/usr/share/ipa/updates/20-ipaservers_hostgroup.update
/usr/share/ipa/updates/20-nss_ldap.update
/usr/share/ipa/updates/20-replication.update
/usr/share/ipa/updates/20-sslciphers.update
/usr/share/ipa/updates/20-syncrepl.update
/usr/share/ipa/updates/20-user_private_groups.update
/usr/share/ipa/updates/20-uuid.update
/usr/share/ipa/updates/20-whoami.update
/usr/share/ipa/updates/20-winsync_index.update
/usr/share/ipa/updates/21-ca_renewal_container.update
/usr/share/ipa/updates/21-certstore_container.update
/usr/share/ipa/updates/21-replicas_container.update
/usr/share/ipa/updates/25-referint.update
/usr/share/ipa/updates/30-provisioning.update
/usr/share/ipa/updates/30-s4u2proxy.update
/usr/share/ipa/updates/37-locations.update
/usr/share/ipa/updates/40-automember.update
/usr/share/ipa/updates/40-certprofile.update
/usr/share/ipa/updates/40-delegation.update
/usr/share/ipa/updates/40-dns.update
/usr/share/ipa/updates/40-otp.update
/usr/share/ipa/updates/40-realm_domains.update
/usr/share/ipa/updates/40-replication.update
/usr/share/ipa/updates/40-vault.update
/usr/share/ipa/updates/41-caacl.update
/usr/share/ipa/updates/41-lightweight-cas.update
/usr/share/ipa/updates/45-roles.update
/usr/share/ipa/updates/50-7_bit_check.update
/usr/share/ipa/updates/50-dogtag10-migration.update
/usr/share/ipa/updates/50-externalmembers.update
/usr/share/ipa/updates/50-groupuuid.update
/usr/share/ipa/updates/50-hbacservice.update
/usr/share/ipa/updates/50-ipaconfig.update
/usr/share/ipa/updates/50-krbenctypes.update
/usr/share/ipa/updates/50-nis.update
/usr/share/ipa/updates/55-pbacmemberof.update
/usr/share/ipa/updates/59-trusts-sysacount.update
/usr/share/ipa/updates/60-trusts.update
/usr/share/ipa/updates/61-trusts-s4u2proxy.update
/usr/share/ipa/updates/62-ranges.update
/usr/share/ipa/updates/71-idviews-sasl-mapping.update
/usr/share/ipa/updates/71-idviews.update
/usr/share/ipa/updates/72-domainlevels.update
/usr/share/ipa/updates/73-certmap.update
/usr/share/ipa/updates/73-custodia.update
/usr/share/ipa/updates/73-winsync.update
/usr/share/ipa/updates/80-schema_compat.update
/usr/share/ipa/updates/90-post_upgrade_plugins.update