{
  "permissions": {
    "allow": [
      "Bash(systemctl status *)",
      "Bash(systemctl is-active *)"
    ]
  }
}