diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts
index a882e54..632b223 100644
--- a/sepolicy/vendor/file_contexts
+++ b/sepolicy/vendor/file_contexts
@@ -60,6 +60,7 @@
 /(vendor|system/vendor)/bin/motobox                     u:object_r:vendor_motobox_exec:s0
 
 # NFC
+/(vendor|system/vendor)/bin/STFlashTool                                       u:object_r:stflashtool_exec:s0
 /(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@1\.2-service\.st        u:object_r:hal_nfc_default_exec:s0
 /dev/st21nfc                                                                   u:object_r:nfc_device:s0
 
@@ -70,6 +71,9 @@
 /data/vendor/misc/cutback(/.*)?                         u:object_r:cutback_data_file:s0
 /dev/socket/cutback                                     u:object_r:cutback_socket:s0
 
+# Secure Element
+/(vendor|system/vendor)/bin/hw/android\.hardware\.secure_element@1\.2-service\.st        u:object_r:hal_secure_element_default_exec:s0
+
 # Touch
 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.nio			u:object_r:hal_lineage_touch_default_exec:s0
 
diff --git a/sepolicy/vendor/stflashtool.te b/sepolicy/vendor/stflashtool.te
new file mode 100644
index 0000000..3643503
--- /dev/null
+++ b/sepolicy/vendor/stflashtool.te
@@ -0,0 +1,8 @@
+type stflashtool, domain;
+type stflashtool_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(stflashtool)
+
+allow stflashtool nfc_device:chr_file {ioctl read write getattr lock append map open watch watch_reads};
+get_prop(stflashtool, vendor_radio_prop)
+set_prop(stflashtool, vendor_mot_nfc_prop)
\ No newline at end of file