Auto detect vndk based on vendor SELinux policy
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 15ebca2..10bc0ce 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -1 +1,2 @@
/system/bin/phh-su u:object_r:phhsu_exec:s0
+/system/bin/vndk-detect u:object_r:vndk_detect_exec:s0
diff --git a/sepolicy/vndk_detect.te b/sepolicy/vndk_detect.te
new file mode 100644
index 0000000..ef4c7bf
--- /dev/null
+++ b/sepolicy/vndk_detect.te
@@ -0,0 +1,11 @@
+type vndk_detect, coredomain, domain;
+type vndk_detect_exec, exec_type, file_type;
+
+init_daemon_domain(vndk_detect);
+allow vndk_detect sepolicy_file:file r_file_perms;
+set_prop(vndk_detect,system_prop);
+
+allow vndk_detect shell_exec:file rx_file_perms;
+allow vndk_detect toolbox_exec:file rx_file_perms;
+#/system/bin/grep
+allow vndk_detect system_file:file rx_file_perms;