--- old/src/java.base/share/lib/security/default.policy	2016-10-27 12:04:14.725011980 -0400
+++ new/src/java.base/share/lib/security/default.policy	2016-10-27 12:04:14.489016990 -0400
@@ -32,8 +32,22 @@
     permission javax.smartcardio.CardPermission "*", "*";
     permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
     permission java.lang.RuntimePermission
-                   "accessClassInPackage.sun.security.*";
-    permission java.util.PropertyPermission "*", "read";
+                   "accessClassInPackage.sun.security.jca";
+    permission java.lang.RuntimePermission
+                   "accessClassInPackage.sun.security.util";
+    permission java.util.PropertyPermission
+                   "javax.smartcardio.TerminalFactory.DefaultType", "read";
+    permission java.util.PropertyPermission "os.name", "read";
+    permission java.util.PropertyPermission "os.arch", "read";
+    permission java.util.PropertyPermission "sun.arch.data.model", "read";
+    permission java.util.PropertyPermission
+                    "sun.security.smartcardio.library", "read";
+    permission java.util.PropertyPermission
+                    "sun.security.smartcardio.t0GetResponse", "read";
+    permission java.util.PropertyPermission
+                    "sun.security.smartcardio.t1GetResponse", "read";
+    permission java.util.PropertyPermission
+                    "sun.security.smartcardio.t1StripLe", "read";
     // needed for looking up native PC/SC library
     permission java.io.FilePermission "<<ALL FILES>>","read";
     permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
--- old/test/sun/security/smartcardio/TestChannel.java	2016-10-27 12:04:15.720990835 -0400
+++ new/test/sun/security/smartcardio/TestChannel.java	2016-10-27 12:04:15.460996354 -0400
@@ -23,11 +23,12 @@
 
 /*
  * @test
- * @bug 6239117
+ * @bug 6239117 8167512
  * @summary test logical channels work
  * @author Andreas Sterbenz
  * @modules java.smartcardio/javax.smartcardio
  * @run main/manual TestChannel
+ * @run main/othervm/manual/java.security.policy==test.policy TestChannel
  */
 
 // This test requires special hardware.
--- old/test/sun/security/smartcardio/TestControl.java	2016-10-27 12:04:16.664970793 -0400
+++ new/test/sun/security/smartcardio/TestControl.java	2016-10-27 12:04:16.404976313 -0400
@@ -23,11 +23,12 @@
 
 /*
  * @test
- * @bug 6239117 6470320
+ * @bug 6239117 6470320 8167512
  * @summary test if transmitControlCommand() works
  * @author Andreas Sterbenz
  * @modules java.smartcardio/javax.smartcardio
  * @run main/manual TestControl
+ * @run main/othervm/manual/java.security.policy==test.policy TestControl
  */
 
 // This test requires special hardware.
--- old/test/sun/security/smartcardio/TestDefault.java	2016-10-27 12:04:17.628950327 -0400
+++ new/test/sun/security/smartcardio/TestDefault.java	2016-10-27 12:04:17.372955762 -0400
@@ -23,11 +23,12 @@
 
 /*
  * @test
- * @bug 6327047
+ * @bug 6327047 8167512
  * @summary verify that TerminalFactory.getDefault() works
  * @author Andreas Sterbenz
  * @modules java.smartcardio/javax.smartcardio
  * @run main/manual TestDefault
+ * @run main/othervm/manual/java.security.policy==test.policy TestDefault
  */
 
 // This test requires special hardware.
--- old/test/sun/security/smartcardio/TestDirect.java	2016-10-27 12:04:18.532931135 -0400
+++ new/test/sun/security/smartcardio/TestDirect.java	2016-10-27 12:04:18.280936485 -0400
@@ -23,10 +23,11 @@
 
 /*
  * @test
- * @bug 8046343
+ * @bug 8046343 8167512
  * @summary Make sure that direct protocol is available
  * @modules java.smartcardio/javax.smartcardio
  * @run main/manual TestDirect
+ * @run main/othervm/manual/java.security.policy==test.policy TestDirect
  */
 
 // This test requires special hardware.
--- /dev/null	2016-10-26 09:53:05.176256445 -0400
+++ new/test/sun/security/smartcardio/test.policy	2016-10-27 12:04:19.228916359 -0400
@@ -0,0 +1,3 @@
+grant codebase "file:${test.classes}/*" {
+    permission javax.smartcardio.CardPermission "*", "connect,getBasicChannel,reset,transmitControl";
+};