I guest you live and you learn... I change the name of a file with the word terminal in /var/log and when I went back to XFCE the terminal was white and had no menu but it still worked. But I still can't find what holds the pkg_add entries. Here's a few other files I found. Now I see ... Programs use var and tmp so there no reason to document it.
Code:
/tmp/fam-root empty folder
/var/log/ConsoleKit empty folder
/var/log/Xorg.0.log log file
/var/log/cups empty folder
/var/tmp/.xfsm-ICE-SQA9HV txt file > remove protoname=ICE protodata etc, etc
/var/tmp/dbus-3LmXfGNHtA srwxrwxrwx 0byte 11 files of same type
/var/tmp/cache hald dir with running exec - cups dir empty