Indeed so, my good Sir.
I already talked with our coder and he swears he did not run anything outside of moodle and it's plugins - thats why I've inquired after that kind if problem.
Let me quote my first post on this topic:
Yes, root level "random" files are appearing in moodledata.
Centos, so we are using apache:apache to run.
We have no crontab (really sure) which runs at root level - fresh install 3.3 haven't put in cron yet.
Everything is in moodledata, and html/moodle are apache:apache.
The httpd config set to run as apache.
I've became suspicious when the first suggestion is to set moodledata to 777 here: https://docs.moodle.org/33/en/Installing_Moodle
Selinux is permissive, can't make problems.
So we closed out the possibilities of cron and permission problems.
What else you can suggest please?
So the exact symptoms are:
-I set everything apache:apache in moodledata and the html moodle dir
-time passes while the coder isn't doing anything, nor does the cron, just teachers/students using moodle
-there are seemingly random root level files appearing inside the moodledata and moodle html directories
So yes, the examples I've provided aren't temp files this time.
I think I've included the paths of those examples, but as it was a php file it should belong into the html moodle dir.
Sorry, but I refer to two directories, one is empty at install: moodledata, and the other is downloaded from here, that is moodle html dir for me.
And in both of those directories, root level files are appearing. ;(
I wonder if the coder is lazy, and uploads his php-s onto the server carelessla, leaving them as root, it is the apache which runs it, and should beand stay on apache level?