diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index 569433e..e0de1a5 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -399,7 +399,8 @@
           \s+yoda : TTY=pts/[0-9] ; PWD=/\S+ ; USER=root ; COMMAND=/.+
           # yodaNas. If the btrbk service is run.
           \s+btrbk : PWD=/ ; USER=root ; COMMAND=/.+
-          \s+root : PWD=/ ; USER=root ; COMMAND=/nix/store/[a-z0-9]+-btrfs-progs-[0-9\.]+/bin/btrfs (subvolume show|subvolume delete --commit-each|send|receive) .+
+          \s+root : PWD=/ ; USER=root ; COMMAND=/nix/store/[a-z0-9]+-btrfs-progs-[0-9\.]+/bin/btrfs (subvolume list|subvolume show|subvolume delete --commit-each|send|receive) .+
+          \s+root : PWD=/ ; USER=root ; COMMAND=/nix/store/[a-z0-9]+-coreutils-[0-9\.]+/bin/readlink -v -e .+
         '';
         match = "SYSLOG_IDENTIFIER = sudo";
       }