When redeploying a WAR file with a SecurityManager running, I get the following exception (debug logging included):

2006-04-10 15:32:09,874 DEBUG [org.jboss.web.WebModule] Starting jboss.web.deployment:war=myTestWar.war,id=-2101272784
2006-04-10 15:32:09,874 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] webContext: null
2006-04-10 15:32:09,874 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] warURL: file:/C:/Documents and Settings/paul_sideleau/My Documents/jboss-4.0.3SP1/server/dev/tmp/deploy/tmp2472myTestWa-exp.war/
2006-04-10 15:32:09,874 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] webAppParser: org.jboss.web.AbstractWebDeployer$DescriptorParser@1dbe098
2006-04-10 15:32:09,874 DEBUG [org.jboss.web.WebPermissionMapping] Qualified url patterns:

{/admin/*=PatternInfo[pattern=/admin/*,type=1,isOverriden=false,qualifiers=[]], /=PatternInfo[pattern=/,type=3,isOverriden=false,qualifiers=[PatternInfo[pattern=/admin/*,type=1,isOverriden=false,qualifiers=[]], PatternInfo[pattern=/MyServlet,type=4,isOverriden=false,qualifiers=[]]]], /MyServlet=PatternInfo[pattern=/MyServlet,type=4,isOverriden=false,qualifiers=[]]}

2006-04-10 15:32:09,937 INFO [org.jboss.web.tomcat.tc5.TomcatDeployer] deploy, ctxPath=/mycontext, warUrl=.../tmp/deploy/tmp2472myTestWar-exp.war/
2006-04-10 15:32:09,937 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] AbstractWebContainer.parseWebAppDescriptors, Begin
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] Creating ENC using ClassLoader: java.net.FactoryURLClassLoader@17f673b
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] ..org.jboss.mx.loading.UnifiedClassLoader3@9a4ba3

{ url=file:/C:/Documents and Settings/paul_sideleau/My Documents/jboss-4.0.3SP1/server/dev/tmp/deploy/tmp2472myTestWar-exp.war/ ,addedOrder=43}

2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] ..org.jboss.system.server.NoAnnotationURLClassLoader@1c0ec97
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] ..sun.misc.Launcher$AppClassLoader@7ced01
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] ..sun.misc.Launcher$ExtClassLoader@1ac04e8
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] Unable to retrieve orbjavax.management.InstanceNotFoundException: jboss:service=CorbaORB is not registered.
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] Linked java:comp/UserTransaction to JNDI name: UserTransaction
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] addEnvEntries
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkResourceEnvRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkResourceRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkMessageDestinationRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkEjbRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkEjbLocalRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkServiceRefs
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] linkSecurityDomain
2006-04-10 15:32:09,953 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] Linking security/securityMgr to JNDI name: java:/jaas/SSI-Software
2006-04-10 15:32:09,968 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] AbstractWebContainer.parseWebAppDescriptors, End
2006-04-10 15:32:09,968 DEBUG [org.jboss.web.tomcat.tc5.TomcatDeployer] Already exists, destroying jboss.web:j2eeType=WebModule,name=//localhost/mycontextJ2EEApplication=none,J2EEServer=none
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/mycontext]] Stopping filters
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/mycontext]] Stopping filter 'CommonHeadersFilter'
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/mycontext] Stopping filter 'RequestEncoder'
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] loadClass(javax.servlet.ServletRequest, false)
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] Delegating to parent classloader1 java.net.FactoryURLClassLoader@7b9969
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] Searching local repositories
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] findClass(javax.servlet.ServletRequest)
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] securityManager.checkPackageDefinition
2006-04-10 15:32:09,968 DEBUG [org.apache.catalina.loader.WebappClassLoader] findClassInternal(javax.servlet.ServletRequest)
2006-04-10 15:24:08,583 WARN [org.apache.catalina.loader.WebappClassLoader] Failed to open JAR
java.util.zip.ZipException: The system cannot find the file specified
at java.util.zip.ZipFile.open(Native Method)
at java.util.zip.ZipFile.<init>(ZipFile.java:203)
at java.util.jar.JarFile.<init>(JarFile.java:132)
at java.util.jar.JarFile.<init>(JarFile.java:97)
at org.apache.catalina.loader.WebappClassLoader.openJARs(WebappClassLoader.java:1544)
at org.apache.catalina.loader.WebappClassLoader.findResourceInternal(WebappClassLoader.java:1763)
at org.apache.catalina.loader.WebappClassLoader.findClassInternal(WebappClassLoader.java:1570)
at org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:850)
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1299)
at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1181)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2365)
at java.lang.Class.getMethod0(Class.java:2611)
at java.lang.Class.getMethod(Class.java:1579)
at org.apache.catalina.security.SecurityUtil.createMethodAndCacheIt(SecurityUtil.java:343)
at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:211)
at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:177)
at org.apache.catalina.core.ApplicationFilterConfig.release(ApplicationFilterConfig.java:251)
at org.apache.catalina.core.StandardContext.filterStop(StandardContext.java:3575)
at org.apache.catalina.core.StandardContext.stop(StandardContext.java:4249)
at org.apache.catalina.core.ContainerBase.destroy(ContainerBase.java:1131)
at org.apache.catalina.core.StandardContext.destroy(StandardContext.java:4358)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.commons.modeler.BaseModelMBean.invoke(BaseModelMBean.java:503)
at org.jboss.mx.server.RawDynamicInvoker.invoke(RawDynamicInvoker.java:150)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:644)
at org.jboss.web.tomcat.tc5.TomcatDeployer.performDeployInternal(TomcatDeployer.java:157)
at org.jboss.web.tomcat.tc5.TomcatDeployer.performDeploy(TomcatDeployer.java:88)
at org.jboss.web.AbstractWebDeployer.start(AbstractWebDeployer.java:357)
at org.jboss.web.WebModule.startModule(WebModule.java:68)
at org.jboss.web.WebModule.startService(WebModule.java:46)
at org.jboss.system.ServiceMBeanSupport.jbossInternalStart(ServiceMBeanSupport.java:274)
at org.jboss.system.ServiceMBeanSupport.jbossInternalLifecycle(ServiceMBeanSupport.java:230)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:141)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:80)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:72)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:245)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:644)
at org.jboss.system.ServiceController$ServiceProxy.invoke(ServiceController.java:943)
at $Proxy0.start(Unknown Source)
at org.jboss.system.ServiceController.start(ServiceController.java:428)
at sun.reflect.GeneratedMethodAccessor9.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:141)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:80)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:72)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:245)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:644)
at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:176)
at $Proxy31.start(Unknown Source)
at org.jboss.web.AbstractWebContainer.start(AbstractWebContainer.java:400)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:141)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:80)
at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:118)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:74)
at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:127)
at org.jboss.mx.interceptor.DynamicInterceptor.invoke(DynamicInterceptor.java:80)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:74)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:245)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:644)
at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:176)
at $Proxy32.start(Unknown Source)
at org.jboss.deployment.MainDeployer.start(MainDeployer.java:989)
at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:790)
at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:753)
at sun.reflect.GeneratedMethodAccessor48.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:141)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:80)
at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:118)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:74)
at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:127)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:74)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:245)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:644)
at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:176)
at $Proxy9.deploy(Unknown Source)
at org.jboss.deployment.scanner.URLDeploymentScanner.deploy(URLDeploymentScanner.java:319)
at org.jboss.deployment.scanner.URLDeploymentScanner.scan(URLDeploymentScanner.java:507)
at org.jboss.deployment.scanner.AbstractDeploymentScanner$ScannerThread.doScan(AbstractDeploymentScanner.java:192)
at org.jboss.deployment.scanner.AbstractDeploymentScanner$ScannerThread.loop(AbstractDeploymentScanner.java:203)
at org.jboss.deployment.scanner.AbstractDeploymentScanner$ScannerThread.run(AbstractDeploymentScanner.java:182)

I'm not sure if this is a bug or not. The application does get deployed correctly after the exception is thrown. However, if I run JBOSS without a security manager, the exception does not occur.