diff --git a/check_ceph_io b/check_ceph_io
index 36d5a074a1350816054576e92b763ccb93598a7a..bb1e89bd0e458018d897d799ad430556da802456 100755
--- a/check_ceph_io
+++ b/check_ceph_io
@@ -19,11 +19,12 @@
 # 2023-05-10  v1.2  <axel.hahn@unibe.ch>  add tests
 # 2023-05-11  v1.3  <axel.hahn@unibe.ch>  handle ceph status without io data in output
 # 2023-07-27  v1.4  <axel.hahn@unibe.ch>  update help page
+# 2023-10-20  v1.5  <axel.hahn@unibe.ch>  harden sudo command execution
 # ======================================================================
 
 . $(dirname $0)/inc_pluginfunctions
 
-export self_APPVERSION=1.4
+export self_APPVERSION=1.5
 
 function showHelp(){
     local _self; _self=$(basename $0)
@@ -87,7 +88,7 @@ else
     ph.require ceph
 
     # --- get output of ceph
-    if ! CEPHOUT=$( sudo ceph status 2>&1 ); then
+    if ! CEPHOUT=$( sudo -n ceph status 2>&1 ); then
         ph.setStatus "unknown"
         ph.status "no data"
         echo "There is no output from 'sudo ceph status'."
diff --git a/docs/20_Checks/check_ceph_io.md b/docs/20_Checks/check_ceph_io.md
index 9eed61977977ff5c3498dc26b0bdfc15e2aaa38a..31e4301c017a8eca9becb68ceb0d64c386b5e96a 100644
--- a/docs/20_Checks/check_ceph_io.md
+++ b/docs/20_Checks/check_ceph_io.md
@@ -18,11 +18,13 @@ icingaclient ALL=(ALL) NOPASSWD: /bin/ceph
 ```txt
 ______________________________________________________________________
 
-CHECK_CEPH_IO 
-v1.3
+CHECK_CEPH_IO
+v1.5
 
 (c) Institute for Medical Education - University of Bern
 Licence: GNU GPL 3
+
+https://os-docs.iml.unibe.ch/icinga-checks/Checks/check_ceph_io.html
 ______________________________________________________________________
 
 Show cheph IO as read and written bytes per second.