AFAIK, JBoss does not use a security manager to force spec compliance here.

Using IO or native libaries in EJBs can lead to errors, inconsistencies and memory leaks, depending on container configuration or container behaviour.

You can combine MBeans with EJBs to do whatever you wanted to do...