diff --git a/dom0-updates/qubes-dom0-updates.cron b/dom0-updates/qubes-dom0-updates.cron
index 3c09d4a..c6104da 100755
--- a/dom0-updates/qubes-dom0-updates.cron
+++ b/dom0-updates/qubes-dom0-updates.cron
@@ -18,4 +18,6 @@ if [ "$RETCODE" -ne 100 ]; then
 fi
 
 # Touch stat file for qubes-manager
-touch $UPDATES_STAT_FILE
+touch "$UPDATES_STAT_FILE"
+chgrp qubes "$UPDATES_STAT_FILE"
+chmod g+w "$UPDATES_STAT_FILE"