diff --git a/scripts/webui/data/lock/webui_create_update_lock.sh b/scripts/webui/data/lock/webui_create_update_lock.sh
index 07caf95..2fa536b 100755
--- a/scripts/webui/data/lock/webui_create_update_lock.sh
+++ b/scripts/webui/data/lock/webui_create_update_lock.sh
@@ -6,9 +6,10 @@
 webuiCreateUpdateLock() {
     local lock_file="$containers_dir/libreportal/frontend/data/updater.lock"
     
-    # Create lock file with timestamp and process ID
-    echo "LibrePortal WebUI Update: $(date '+%Y-%m-%d %H:%M:%S')" > "$lock_file"
-    
+    # Create lock file with timestamp and process ID. The lock lives in the
+    # dockerinstall-owned WebUI data dir, so write it as the path owner.
+    echo "LibrePortal WebUI Update: $(date '+%Y-%m-%d %H:%M:%S')" | runFileWrite "$lock_file"
+
     if [ $? -eq 0 ]; then
         isSuccessful "Update lock file created: $lock_file"
     else
diff --git a/scripts/webui/data/lock/webui_remove_update_lock.sh b/scripts/webui/data/lock/webui_remove_update_lock.sh
index 7959312..8e1b1a9 100755
--- a/scripts/webui/data/lock/webui_remove_update_lock.sh
+++ b/scripts/webui/data/lock/webui_remove_update_lock.sh
@@ -7,6 +7,6 @@ webuiRemoveUpdateLock() {
     local lock_file="$containers_dir/libreportal/frontend/data/updater.lock"
     
     if [ -f "$lock_file" ]; then
-        rm "$lock_file"
+        runFileOp rm -f "$lock_file"
     fi
 }