The "local" profile of the tck-runner module runs with a security manager enabled by default now. To disable the security manager, provide the -Dwith-security-manager=false option. The policy file in use is tck-runner/src/test/resources/test.policy.