how to inject macro? finding solution for ioctlcmd=7704 denied on unix_stream_socket for system_server domain

[wenchiching]

I have a sepolicy file with below issue
[ 17.586354] type=1400 audit(1479189872.070:249): avc: denied { ioctl } for pid=1515 comm="Binder_3" path="socket:[13175]" dev="sockfs" ino=13175 ioctlcmd=7704

and I found the solution below
http://seandroid-list.tycho.nsa.narkive.com/AgNxhgCu/ioctlcmd-7704-denied-on-unix-stream-socket-for-surfaceflinger-and-system-server-domain

but I cannot figure out the way to inject this setting
+define(IOCTLTEST', 0x00007704')
+allow surfaceflinger surfaceflinger:unix_stream_socket { IOCTLTEST };

can anyone share a hint?