secolor.conf(5)

NAME
secolor.conf - The SELinux color configuration file

DESCRIPTION
This optional file controls the color to be associated to the context components associated to the raw context passed by selinux_raw_context_to_color(3), when context related information is to be displayed in color by an SELinux-aware application.

selinux_raw_context_to_color(3) obtains this color information from the active policy secolor.conf file as returned by selinux_colors_path(3).

FILE FORMAT
The file format is as follows:
    color color_name = #color_mask
    [...]

    context_component string = fg_color_name bg_color_name
    [...]

Where:
color
    The color keyword. Each color entry is on a new line.
color_name
    A single word name for the color (e.g. red).
color_mask
    A color mask starting with a hash (#) that describes the hexadecimal RGB colors with black being #000000 and white being #ffffff.
context_component
    The context component name that must be one of the following:
        user, role, type or range
    Each context_component string ... entry is on a new line.
string
    This is the context_component string that will be matched with the raw context component passed by selinux_raw_context_to_color(3).
    A wildcard '*' may be used to match any undefined string for the user, role and type context_component entries only.

fg_color_name
    The color_name string that will be used as the foreground color. A color_mask may also be used.
bg_color_name
    The color_name string that will be used as the background color. A color_mask may also be used.

EXAMPLES
Example 1 entries are:
    color black = #000000
    color green = #008000
    color yellow = #ffff00
    color blue = #0000ff
    color white = #ffffff
    color red = #ff0000
    color orange = #ffa500
    color tan = #D2B48C

    user * = black white
    role * = white black
    type * = tan orange
    range s0-s0:c0.c1023 = black green
    range s1-s1:c0.c1023 = white green
    range s3-s3:c0.c1023 = black tan
    range s5-s5:c0.c1023 = white blue
    range s7-s7:c0.c1023 = black red
    range s9-s9:c0.c1023 = black orange
    range s15-s15:c0.c1023 = black yellow

Example 2 entries are:
    color black = #000000
    color green = #008000
    color yellow = #ffff00
    color blue = #0000ff
    color white = #ffffff
    color red = #ff0000
    color orange = #ffa500
    color tan = #d2b48c

    user unconfined_u = #ff0000 green
    role unconfined_r = red #ffffff
    type unconfined_t = red orange
    user user_u = black green
    role user_r = white black
    type user_t = tan red
    user xguest_u = black yellow
    role xguest_r = black red
    type xguest_t = black green
    user sysadm_u = white black
    range s0-s0:c0.c1023 = black white
    user * = black white
    role * = black white
    type * = black white

SEE ALSO
selinux(8), selinux_raw_context_to_color(3), selinux_colors_path(3)