commit 9123dc3d9a193043b0b5c66c1cc07dbf9806b2d6
author George Chang <georgekgchang@google.com> Wed Dec 04 14:37:02 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Dec 04 14:37:02 2019 +0000
tree 46c00fc0034f94d092edcd82aac012a6c6e281fd
parent f0cffc73bbcbbe69ef953bfb14df711b986c7f47
parent 83b4c12002b0ee8db1198d113713b62694b8936d

Merge "Make SecureElementService visible for instant apps"

src/com/android/se/security/AccessControlEnforcer.java

diff --git a/src/com/android/se/security/AccessControlEnforcer.java b/src/com/android/se/security/AccessControlEnforcer.java
index 90843a8..a4ceb70 100644
--- a/src/com/android/se/security/AccessControlEnforcer.java
+++ b/src/com/android/se/security/AccessControlEnforcer.java
@@ -499,9 +499,8 @@
             }
         }
         if (!mTerminal.getName().startsWith(SecureElementService.UICC_TERMINAL)) {
-            // It shall be allowed to grant full access if no rule can be retrieved
-            // from the secure element except for UICC.
-            mFullAccess = true;
+            // Deny full access for eSE if no rule can be retrieved because of security concern
+            mFullAccess = false;
             // ARF is supported only on UICC.
             mUseArf = false;
         }