secolor.conf(5) File Formats Manual secolor.conf(5)

# [NAME](#NAME)

secolor.conf - The SELinux color configuration file

# [DESCRIPTION](#DESCRIPTION)

This optional file controls the color to be associated to the context components associated to the *raw* context passed by [**selinux\_raw\_context\_to\_color**(3)](/man/os/libselinux/selinux_raw_context_to_color.3), when context related information is to be displayed in color by an SELinux-aware application.

[**selinux\_raw\_context\_to\_color**(3)](/man/os/libselinux/selinux_raw_context_to_color.3) obtains this color information from the active policy **secolor.conf** file as returned by [**selinux\_colors\_path**(3)](/man/os/libselinux/selinux_colors_path.3).

# [FILE FORMAT](#FILE_FORMAT)

The file format is as follows:

**color** *color\_name* **= #color\_mask**  
\[...]

*context\_component string* **=** *fg\_color\_name bg\_color\_name*  
\[...]

Where:  
**color**

The color keyword. Each color entry is on a new line.

*color\_name*

A single word name for the color (e.g. red).

*color\_mask*

A color mask starting with a hash (#) that describes the hexadecimal RGB colors with black being #000000 and white being #ffffff.

*context\_component*

The context component name that must be one of the following:

user, role, type or range

Each *context\_component* *string* ... entry is on a new line.

*string*

This is the *context\_component* string that will be matched with the *raw* context component passed by [**selinux\_raw\_context\_to\_color**(3)](/man/os/libselinux/selinux_raw_context_to_color.3).  
A wildcard '\*' may be used to match any undefined string for the user, role and type *context\_component* entries only.

*fg\_color\_name*

The color\_name string that will be used as the foreground color. A *color\_mask* may also be used.

*bg\_color\_name*

The color\_name string that will be used as the background color. A *color\_mask* may also be used.

# [EXAMPLES](#EXAMPLES)

Example 1 entries are:

color black = #000000  
color green = #008000  
color yellow = #ffff00  
color blue = #0000ff  
color white = #ffffff  
color red = #ff0000  
color orange = #ffa500  
color tan = #D2B48C

user * = black white  
role * = white black  
type * = tan orange  
range s0-s0:c0.c1023 = black green  
range s1-s1:c0.c1023 = white green  
range s3-s3:c0.c1023 = black tan  
range s5-s5:c0.c1023 = white blue  
range s7-s7:c0.c1023 = black red  
range s9-s9:c0.c1023 = black orange  
range s15-s15:c0.c1023 = black yellow

Example 2 entries are:

color black = #000000  
color green = #008000  
color yellow = #ffff00  
color blue = #0000ff  
color white = #ffffff  
color red = #ff0000  
color orange = #ffa500  
color tan = #d2b48c

user unconfined\_u = #ff0000 green  
role unconfined\_r = red #ffffff  
type unconfined\_t = red orange  
user user\_u = black green  
role user\_r = white black  
type user\_t = tan red  
user xguest\_u = black yellow  
role xguest\_r = black red  
type xguest\_t = black green  
user sysadm\_u = white black  
range s0-s0:c0.c1023 = black white  
user * = black white  
role * = black white  
type * = black white

# [SEE ALSO](#SEE_ALSO)

[**selinux**(8)](/man/os/libselinux/selinux.8), [**selinux\_raw\_context\_to\_color**(3)](/man/os/libselinux/selinux_raw_context_to_color.3), [**selinux\_colors\_path**(3)](/man/os/libselinux/selinux_colors_path.3)

08 April 2011 SELinux API documentation

---

Document: secolor.conf(5) from libselinux 3.11-r2 (Chainguard OS)
Source: https://github.com/SELinuxProject/selinux.git