The technical explanation is that the /dev/log is writable by everyone, so anyone with the basic knowledge of C programming language (or other) can use the syslog() function to inject a line in the /var/log/secure or /var/log/messages file that makes it look like a ssh login or a su to root.
maelezo ya kiufundi ni kwamba Dev / / logi ni writable na kila mtu, hivyo mtu yeyote na elimu ya msingi ya lugha ya programu C (au nyingine) unaweza kutumia syslog() kazi ya kuingiza line katika / var / logi / salama au / var / logi / ujumbe faili kwamba inafanya ni kuangalia kama login SSH au su mizizi.