Unable to read web-application files using ServletContext.getResourceAsStream when security manager is used

Use reproducer from WFLY-3651 - it fails to print content of the permissions.xml file. When -Djava.security.debug=access:failure is used, then I see following information in the server log: 2014-11-21 14:12:39,554 ERROR [stderr] ( default task-1) access: access denied ( "java.io.FilePermission" "/tmp/wildfly-9.0.0.Alpha2-SNAPSHOT/standalone/tmp/vfs/temp/temp59d03e121ef867e7/content-2a75d0882a0099e0/META-INF/permissions.xml" "read" ) 2014-11-21 14:12:39,555 ERROR [stderr] ( default task-1) java.lang.Exception: Stack trace 2014-11-21 14:12:39,556 ERROR [stderr] ( default task-1) at java.lang. Thread .dumpStack( Thread .java:1365) 2014-11-21 14:12:39,556 ERROR [stderr] ( default task-1) at java.security.AccessControlContext.checkPermission(AccessControlContext.java:362) 2014-11-21 14:12:39,556 ERROR [stderr] ( default task-1) at java.security.AccessController.checkPermission(AccessController.java:559) 2014-11-21 14:12:39,557 ERROR [stderr] ( default task-1) at java.lang. SecurityManager .checkPermission( SecurityManager .java:549) 2014-11-21 14:12:39,557 ERROR [stderr] ( default task-1) at java.lang. SecurityManager .checkRead( SecurityManager .java:888) 2014-11-21 14:12:39,557 ERROR [stderr] ( default task-1) at java.io.File.exists(File.java:808) 2014-11-21 14:12:39,558 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.resource.FileResourceManager.getResource(FileResourceManager.java:134) 2014-11-21 14:12:39,558 ERROR [stderr] ( default task-1) at org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource(ServletResourceManager.java:54) 2014-11-21 14:12:39,558 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.resource.CachingResourceManager.getResource(CachingResourceManager.java:107) 2014-11-21 14:12:39,559 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.resource.CachingResourceManager.getResource(CachingResourceManager.java:32) 2014-11-21 14:12:39,559 ERROR [stderr] ( default task-1) at io.undertow.servlet.spec.ServletContextImpl.getResourceAsStream(ServletContextImpl.java:251) 2014-11-21 14:12:39,559 ERROR [stderr] ( default task-1) at org.jboss.test.Wfly3651ReproducerServlet.doGet(Wfly3651ReproducerServlet.java:59) 2014-11-21 14:12:39,560 ERROR [stderr] ( default task-1) at javax.servlet.http.HttpServlet.service(HttpServlet.java:687) 2014-11-21 14:12:39,560 ERROR [stderr] ( default task-1) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) 2014-11-21 14:12:39,560 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) 2014-11-21 14:12:39,561 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) 2014-11-21 14:12:39,561 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) 2014-11-21 14:12:39,561 ERROR [stderr] ( default task-1) at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) 2014-11-21 14:12:39,562 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 2014-11-21 14:12:39,562 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) 2014-11-21 14:12:39,562 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) 2014-11-21 14:12:39,563 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 2014-11-21 14:12:39,563 ERROR [stderr] ( default task-1) at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) 2014-11-21 14:12:39,563 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) 2014-11-21 14:12:39,564 ERROR [stderr] ( default task-1) at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) 2014-11-21 14:12:39,564 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) 2014-11-21 14:12:39,564 ERROR [stderr] ( default task-1) at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) 2014-11-21 14:12:39,565 ERROR [stderr] ( default task-1) at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) 2014-11-21 14:12:39,565 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 2014-11-21 14:12:39,565 ERROR [stderr] ( default task-1) at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) 2014-11-21 14:12:39,566 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 2014-11-21 14:12:39,566 ERROR [stderr] ( default task-1) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 2014-11-21 14:12:39,566 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) 2014-11-21 14:12:39,567 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:247) 2014-11-21 14:12:39,567 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:76) 2014-11-21 14:12:39,568 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletInitialHandler$1$1.run(ServletInitialHandler.java:172) 2014-11-21 14:12:39,568 ERROR [stderr] ( default task-1) at java.security.AccessController.doPrivileged(Native Method) 2014-11-21 14:12:39,568 ERROR [stderr] ( default task-1) at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:169) 2014-11-21 14:12:39,569 ERROR [stderr] ( default task-1) at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199) 2014-11-21 14:12:39,569 ERROR [stderr] ( default task-1) at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:767) 2014-11-21 14:12:39,569 ERROR [stderr] ( default task-1) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) 2014-11-21 14:12:39,570 ERROR [stderr] ( default task-1) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) 2014-11-21 14:12:39,570 ERROR [stderr] ( default task-1) at java.lang. Thread .run( Thread .java:745) 2014-11-21 14:12:39,571 ERROR [stderr] ( default task-1) access: access allowed ( "java.security.SecurityPermission" "getPolicy" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) access: domain that failed ProtectionDomain (vfs:/content/wfly3651.war/WEB-INF/classes <no signer certificates>) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) null 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) <no principals> 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) org.jboss.modules.security.FactoryPermissionCollection@4d7c1827 ( 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "org.jboss.vfs.VirtualFilePermission" "/content/wfly3651.war" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "org.jboss.vfs.VirtualFilePermission" "/content/wfly3651.war/-" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "org.jboss.vfs.VirtualFilePermission" "/content/wfly3651.war/WEB-INF/classes" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "org.jboss.vfs.VirtualFilePermission" "/content/wfly3651.war/WEB-INF/classes/-" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.version" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vendor.url" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.info" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.name" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "sun.cpu.isalist" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "sun.management.compiler" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.runtime.name" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.version" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "file.separator" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vendor.url.bug" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.specification.vendor" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "file.encoding" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "line.separator" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.specification.version" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.specification.vendor" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "*" "read,write" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "os.name" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.vendor" "read" ) 2014-11-21 14:12:39,572 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "path.separator" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.specification.name" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "os.version" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "os.arch" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.runtime.version" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java. class. version" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vendor" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.vm.specification.name" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "java.specification.version" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "java.util.PropertyPermission" "sun.cpu.endian" "read" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:comp" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:comp/-" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:module" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:module/-" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:app" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:app/-" "lookup,list,listBindings" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:global" "lookup" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:global/-" "lookup" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:jboss" "lookup" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:jboss/-" "lookup" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) ( "org.jboss.as.naming.JndiPermission" "java:/-" "lookup" ) 2014-11-21 14:12:39,573 ERROR [stderr] ( default task-1) )