diff --git a/lucene/common-build.xml b/lucene/common-build.xml
index 41da3f25952..f82533676a4 100644
--- a/lucene/common-build.xml
+++ b/lucene/common-build.xml
@@ -1174,7 +1174,6 @@
 
             <!-- Restrict access to certain Java features and install security manager: -->
             <sysproperty key="common.dir" file="${common.dir}" />
-            <sysproperty key="ant.library.dir" file="${ant.library.dir}" />
             <sysproperty key="clover.db.dir" file="${clover.db.dir}" />
             <syspropertyset>
                 <propertyref prefix="java.security.manager"/>
diff --git a/lucene/tools/junit4/solr-tests.policy b/lucene/tools/junit4/solr-tests.policy
index 816c7c382e5..faa9ecb2317 100644
--- a/lucene/tools/junit4/solr-tests.policy
+++ b/lucene/tools/junit4/solr-tests.policy
@@ -34,15 +34,8 @@ grant {
   permission java.io.FilePermission "${clover.db.dir}${/}-", "read,write,delete";
   permission java.io.FilePermission "${tests.linedocsfile}", "read";
   // hadoop
-  permission java.io.FilePermission "${ant.library.dir}${/}-", "read";
-  permission java.io.FilePermission "${user.home}${/}.ant${/}lib${/}-", "read";
   permission java.io.FilePermission "${user.home}${/}hadoop-metrics2.properties", "read";
   permission java.io.FilePermission "${user.home}${/}hadoop-metrics2-namenode.properties", "read";
-  // kerberos
-  permission java.io.FilePermission "${user.home}${/}.java.login.config", "read";
-  // SolrTestCaseJ4 explicitly uses these
-  permission java.io.FilePermission "/dev/./urandom", "read";
-  permission java.io.FilePermission "/dev/random", "read";
   // DirectoryFactoryTest messes with these (wtf?)
   permission java.io.FilePermission "/tmp/inst1/conf/solrcore.properties", "read";
   permission java.io.FilePermission "/path/to/myinst/conf/solrcore.properties", "read";