For me Joomla doesn't. Only my serverwide install of Squirrelmail which seems odd since my serverwide install of Roundcube does not do it. I have Joomla on one of my domains and have no problems with session files on it at all.
Well I'm going to delete them since they date back to 10/08 and keep an eye on the folder
I had to Google this one
Files in the /var/tmp directory are persistent through a reboot and files in the /tmp directory are not. The files in these two folders should not be the same. I only have a symlink to mysql.sock in the /var/tmp folder.
I'll check again, but they looked identical
I'm not sure what the question really is here. You're asking for a detailed list of directories for the /tmp directory and that's what you're getting lol. If you want a list of files in the /tmp directory try using "ls -l /tmp".
Dunno; thought /tmp shouldn't be writeable
I do not think that this works on VPSs. I just tried and it wouldn't and I have also seen forum posts to that effect.
There are numerous tutorials out there for securing a cPanel VPS just search on that phrase
Also I highly recommend CSF if you're not using a firewall. It also has a "check server security" function in it's WHM interface that is very handy.
Been using CSF forever. I also use their http://www.configserver.com/cp/cse.html Which is how I discovered those files
Hope that helps!