# Allow bacula sd to access the SMART error page on tape devices, but not to add any other parameter
bacula  ALL=NOPASSWD: /usr/sbin/smartctl -d scsi -H -l error /dev/tape/by-id/*,/usr/sbin/smartctl -d scsi -H -l error /dev/nst[0-9],/usr/sbin/smartctl -d scsi -H -l error /dev/nst[0-9]*[0-9alm],/usr/sbin/smartctl -d scsi -H -l error /dev/st[0-9],/usr/sbin/smartctl -d scsi -H -l error /dev/st[0-9]*[0-9alm],!/usr/sbin/smartctl -d scsi -H -l error * *