vmci: tweak required vs optional APIs

mandiant · Nov 15, 2023 · 1aae081 · 1aae081
1 parent 8860a22
commit 1aae081
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/communication/socket/create-vmci-socket.yml b/communication/socket/create-vmci-socket.yml
@@ -17,13 +17,13 @@ rule:
     - or:
       - and:
         - os: windows
-        - or:
-          - api: socket
-          - api: DeviceIoControl
+        - api: DeviceIoControl
         - number: 0x81032068 = VMCI_SOCKETS_GET_AF_VALUE
+        - optional:
+          - api: socket
       - and:
         - os: linux
-        - or:
-          - api: socket
-          - api: ioctl
+        - api: ioctl
         - number: 0x7B8 = VMCI_SOCKETS_GET_AF_VALUE
+        - optional:
+          - api: socket