diff --git a/Android.mk b/Android.mk
index db866e899..1af67bbf0 100644
--- a/Android.mk
+++ b/Android.mk
@@ -203,6 +203,20 @@ $(LOCAL_BUILT_MODULE): $(built_sepolicy) $(all_sc_files) $(HOST_OUT_EXECUTABLES)
 GENERAL_SEAPP_CONTEXTS := $(LOCAL_BUILT_MODULE)
 all_sc_files :=
 
+##################################
+include $(CLEAR_VARS)
+LOCAL_MODULE := general_seapp_neverallows
+LOCAL_MODULE_CLASS := ETC
+LOCAL_MODULE_TAGS := tests
+
+include $(BUILD_SYSTEM)/base_rules.mk
+
+$(LOCAL_BUILT_MODULE): $(addprefix $(LOCAL_PATH)/, seapp_contexts)
+	@mkdir -p $(dir $@)
+	- $(hide) grep -ie '^neverallow' $< > $@
+
+GENERAL_SEAPP_NEVERALLOWS := $(LOCAL_BUILT_MODULE)
+
 ##################################
 include $(CLEAR_VARS)