Comment 4 for bug 1824961

I don't have any examples atm, but we know it tries to read cputable at least:

/usr/share/dpkg/cputable r

It might also need access to apt lists, but this needs investigating

/var/lib/apt/lists/** r
/etc/apt/apt.conf r
/etc/apt/apt.conf.d/** r
/etc/apt/sources.list r
/etc/apt/sources.list.d/** r

maybe

/etc/apt/preferences r
/etc/apt/preferences.d/** r