Access rule application/file can be inaccessible dynamically

There is an usecase that the access rule application/file is dynamically
disabled in order to prohibit access to the secure element. Currently
updateAccessRuleIfNeed() throws AccessControlException when ARA is not
found, but does not throw the same exception in ARF case. This change
make them consistent.

Bug: 129101434
Test: Manually confirmed no ARF is treated in the same way as no ARA.

Change-Id: I8a8e4cb26ff1b92ef189b38364a19ca2205fb63c

1 files changed, 1 insertions, 1 deletions

diff --git a/src/com/android/se/security/AccessControlEnforcer.java b/src/com/android/se/security/AccessControlEnforcer.java
index 07df7e6..22b82f0 100644
--- a/src/com/android/se/security/AccessControlEnforcer.java
+++ b/src/com/android/se/security/AccessControlEnforcer.java
@@ -443,7 +443,7 @@ public class AccessControlEnforcer {
                 // These errors must be distinguished from other ones.
                 throw e;
             } catch (Exception e) {
-                Log.e(mTag, e.getMessage());
+                throw new AccessControlException("No ARF found in " + mTerminal.getName());
             }
         }
     }