diff --git a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java index 9c64054be37e9..90c79a9554b99 100644 --- a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java +++ b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java @@ -9321,7 +9321,11 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub { @Override public CharSequence getDeviceOwnerLockScreenInfo() { - return mLockPatternUtils.getDeviceOwnerInfo(); + final CallerIdentity caller = getCallerIdentity(); + Preconditions.checkCallAuthorization( + isDefaultDeviceOwner(caller) || isProfileOwnerOfOrganizationOwnedDevice(caller)); + return mInjector.binderWithCleanCallingIdentity(() -> + mLockPatternUtils.getDeviceOwnerInfo()); } private void clearUserPoliciesLocked(int userId) {