org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames is missing doPrivileged ---------------------------------------------------------------------------------------------------------------------- Key: ISPN-10635 URL: https://issues.jboss.org/browse/ISPN-10635 Project: Infinispan Issue Type: Bug Affects Versions: 9.4.16.Final, 10.0.0.CR1 Reporter: Nathan Rauh Assignee: Tristan Tarrant Priority: Minor Fix For: 10.0.0.Final We were testing the Infinispan JCache implementation with our product and turned on Java 2 security. It fails with Java 2 security enabled because a doPrivileged is missing from the following stack, so we are unable to grant permissions, {{java.security.AccessControlException: Access denied ("java.io.FilePermission" [various-jar-file-names-here] "read")java.base/java.security.AccessController.throwACE(AccessController.java:176) java.base/java.security.AccessController.checkPermissionHelper(AccessController.java:237) java.base/java.security.AccessController.checkPermission(AccessController.java:373) java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322) com.ibm.ws.kernel.launch.internal.MissingDoPrivDetectionSecurityManager.checkPermission(MissingDoPrivDetectionSecurityManager.java:45) java.base/java.lang.SecurityManager.checkRead(SecurityManager.java:661) java.base/java.util.zip.ZipFile.<init>(ZipFile.java:235) java.base/java.util.zip.ZipFile.<init>(ZipFile.java:176) java.base/java.util.jar.JarFile.<init>(JarFile.java:346) java.base/sun.net.www.protocol.jar.URLJarFile.<init>(URLJarFile.java:103) java.base/sun.net.www.protocol.jar.URLJarFile.getJarFile(URLJarFile.java:72) java.base/sun.net.www.protocol.jar.JarFileFactory.get(JarFileFactory.java:99) java.base/sun.net.www.protocol.jar.JarURLConnection.connect(JarURLConnection.java:125) java.base/sun.net.www.protocol.jar.JarURLConnection.getInputStream(JarURLConnection.java:155) java.base/java.net.URL.openStream(URL.java:1117) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.getBundleSymbolicNames(ManifestUberJarDuplicatedJarsWarner.java:54) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.isClasspathCorrect(ManifestUberJarDuplicatedJarsWarner.java:39) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner.lambda$isClasspathCorrectAsync$3(ManifestUberJarDuplicatedJarsWarner.java:79) org.infinispan.commons.util.uberjar.ManifestUberJarDuplicatedJarsWarner$$Lambda$252.000000004F268420.get(Unknown Source) }}