fix feedback

mandiant · Jun 11, 2024 · dd29b15 · dd29b15
1 parent 96ed529
commit dd29b15
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/nursery/execute-syscall.yml b/nursery/execute-syscall.yml
@@ -14,7 +14,11 @@ rule:
       - https://github.com/j00ru/windows-syscalls
   features:
     - or:
-      - api: syscall
+      - and:
+        - or:
+          - os: linux
+          - os: android
+        - api: syscall # https://man7.org/linux/man-pages/man2/syscall.2.html
       - and:
         - mnemonic: syscall
         - or: