diff --git a/astd/astd.te b/astd/astd.te
new file mode 100644
index 0000000..9f29caa
--- /dev/null
+++ b/astd/astd.te
@@ -0,0 +1,17 @@
+# astd service
+type astd, domain;
+
+# /vendor/bin/astc        u:object_r:vendor_shell_exec:s0
+# system/sepolicy/public/vendor_shell.te
+# type vendor_shell_exec, exec_type, vendor_file_type, file_type;
+
+# /vendor/bin/astd        u:object_r:vendor_toolbox_exec:s0
+# system/sepolicy/public/vendor_toolbox.te
+# type vendor_toolbox_exec, exec_type, vendor_file_type, file_type;
+
+type astd_exec, exec_type, vendor_file_type, file_type;
+
+userdebug_or_eng(`
+  init_daemon_domain(astd)
+')
+
diff --git a/astd/file_contexts b/astd/file_contexts
new file mode 100644
index 0000000..0df5774
--- /dev/null
+++ b/astd/file_contexts
@@ -0,0 +1,3 @@
+/vendor/bin/astc        u:object_r:astd_exec:s0
+/vendor/bin/astd        u:object_r:astd_exec:s0
+