diff --git a/tmpfiles-unbound.conf b/tmpfiles-unbound.conf
index bb88f01..c09cc75 100644
--- a/tmpfiles-unbound.conf
+++ b/tmpfiles-unbound.conf
@@ -1 +1 @@
-D /run/unbound 0755 unbound unbound -
+D /run/unbound 0775 unbound root -
diff --git a/unbound-anchor.service b/unbound-anchor.service
index 59683c8..1116243 100644
--- a/unbound-anchor.service
+++ b/unbound-anchor.service
@@ -6,5 +6,5 @@ Documentation=man:unbound-anchor(8)
 Type=oneshot
 User=unbound
 EnvironmentFile=-/etc/sysconfig/unbound
-ExecStart=/bin/bash -c 'if [ "$DISABLE_UNBOUND_ANCHOR" = "yes" ]; then echo "Updates of root keys with unbound-anchor is disabled"; else /usr/sbin/unbound-anchor $UNBOUND_ANCHOR_OPTIONS; fi'
+ExecStart=/bin/bash -c 'if [ "$DISABLE_UNBOUND_ANCHOR" = "yes" ] || [ -f /run/unbound/anchor-disable ]; then echo "Updates of root keys with unbound-anchor is disabled"; else /usr/sbin/unbound-anchor $UNBOUND_ANCHOR_OPTIONS; fi'
 SuccessExitStatus=1
diff --git a/unbound.spec b/unbound.spec
index dd15b60..ffc39e1 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -449,7 +449,7 @@ popd
 %doc doc/CREDITS doc/FEATURES
 %{_unitdir}/%{name}.service
 %{_unitdir}/%{name}-keygen.service
-%attr(0755,unbound,unbound) %dir %{_rundir}/%{name}
+%attr(0775,unbound,root) %dir %{_rundir}/%{name}
 %attr(0644,root,root) %{_tmpfilesdir}/unbound.conf
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/%{name}/unbound.conf
 %dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/keys.d