diff --git a/postlfs/security/make-ca.xml b/postlfs/security/make-ca.xml
index 4d694e8524..24da01dc38 100644
--- a/postlfs/security/make-ca.xml
+++ b/postlfs/security/make-ca.xml
@@ -183,7 +183,8 @@ openssl x509 -in class3.crt -text -fingerprint -setalias "CAcert Class 3 root" \
     <phrase revision="systemd">enable the systemd timer:</phrase>
     </para>
 
-<screen role="root" revision="sysv"><userinput>cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp;
+<screen role="root" revision="sysv"><userinput>install -vdm755 /etc/cron.weekly                       &amp;&amp;
+cat &gt; /etc/cron.weekly/update-pki.sh &lt;&lt; "EOF" &amp;&amp;
 <literal>#!/bin/bash
 /usr/sbin/make-ca -g</literal>
 EOF