The policy file provider tests that utilise the sub policy provider are testing UmbrellaGrants, in this case we might be better off disabling these tests for jdk9. The ConcurrentPolicyFile provider has some optimisations to avoid populating a ProtectionDomain with permissions unless it has been granted AllPermmission (to avoid blocking during implies permission checks). This makes it an unsuitable replacement for the sun policy provider in this instance, unless we want to revise the tests to ignore the results of Policy.getPermissions(CodeSource) calls?
Regards, Peter. Sent from my Samsung device.