Set Up Passwordless sudo

Set Up Passwordless sudo

/smart-status, /health-summary, /dsm-update-check and all Docker commands need elevated privileges. DSM has no visudo, so you create a drop-in file:

echo '<user> ALL=(ALL) NOPASSWD: /usr/bin/smartctl, /usr/syno/sbin/synoupgrade, /usr/local/bin/docker' \
  | sudo tee /etc/sudoers.d/synology-manager-plus
sudo chmod 0440 /etc/sudoers.d/synology-manager-plus

Restrict the grant to exactly these programs — not to ALL. Note: a major DSM upgrade can reset the drop-in file; just recreate it afterwards.