diff --git a/astd/astd.mk b/astd/astd.mk
new file mode 100644
index 0000000..0dfa4f9
--- /dev/null
+++ b/astd/astd.mk
@@ -0,0 +1,9 @@
+# This module is only for factory targets, please include this makefile
+# with check:
+#
+# ifneq ($(filter factory_%,$(TARGET_PRODUCT)),)
+#   include device/google/gs-common/astd/astd.mk
+# endif
+SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += device/google/gs-common/astd/sepolicy
+
+PRODUCT_PACKAGES_DEBUG += astd
diff --git a/astd/sepolicy/astd.te b/astd/sepolicy/astd.te
new file mode 100644
index 0000000..815e832
--- /dev/null
+++ b/astd/sepolicy/astd.te
@@ -0,0 +1,10 @@
+# astd service
+type astd, domain;
+type astd_exec, exec_type, file_type, system_file_type;
+
+typeattribute astd coredomain;
+
+userdebug_or_eng(`
+  init_daemon_domain(astd)
+')
+
diff --git a/astd/sepolicy/file_contexts b/astd/sepolicy/file_contexts
new file mode 100644
index 0000000..17ac54c
--- /dev/null
+++ b/astd/sepolicy/file_contexts
@@ -0,0 +1,3 @@
+/system_ext/bin/astc        u:object_r:astd_exec:s0
+/system_ext/bin/astd        u:object_r:astd_exec:s0
+