From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 6 Aug 2016 14:20:07 +0000 (+0100)
Subject: unbound: Update trust anchor once a day
X-Git-Tag: v2.19-core106~100^2~11
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c648dd88f57309f08d2703bdb4596aaa75d776aa;p=people%2Fstevee%2Fipfire-2.x.git

unbound: Update trust anchor once a day

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/cron/crontab b/config/cron/crontab
index c42c650808..c6d8a725c7 100644
--- a/config/cron/crontab
+++ b/config/cron/crontab
@@ -67,3 +67,6 @@ HOME=/
 
 # Cleanup the mail spool directory
 %weekly * * /usr/sbin/dma-cleanup-spool
+
+# Update DNS trust anchor
+%daily,random * * @runas(nobody) /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem