1 2 3 4 5 6 7 8
{ "id": "guards/tail-follow", "match": { "program": ["tail"], "argv_contains_all": ["-f"] }, "action": "passthrough" }