I think it's a Red Hat'isn -- apps "touch" a file in /var/lock/subsys when they start and remove it when they're done. That way you can easily see if a copy of an app is running (if you want to screw with the system, you can touch or rm the files yourself
).