---
name: "secolor.conf"
section: "5"
platform: "linux"
package: "selinux-utils"
version: "3.8.1-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/secolor.conf"
---

# secolor.conf(5)

The SELinux color configuration file

## NAME

secolor.conf - The SELinux color configuration file

## DESCRIPTION

This optional file controls the color to be associated to the context components associated to the  *raw* context passed by  [**selinux\_raw\_context\_to\_color**(3)](/selinux_raw_context_to_color/3.md), when context related information is to be displayed in color by an SELinux-aware application.

[**selinux\_raw\_context\_to\_color**(3)](/selinux_raw_context_to_color/3.md) obtains this color information from the active policy  **secolor.conf** file as returned by  [**selinux\_colors\_path**(3)](/selinux_colors_path/3.md).

## FILE FORMAT

The file format is as follows:

**color** *color\_name* **= #***color\_mask*\
 \[...\]

*context\_component string* **=** *fg\_color\_name bg\_color\_name*\
 \[...\]

Where:\
 **color**

The color keyword. Each color entry is on a new line.

*color\_name*

A single word name for the color (e.g. red).

*color\_mask*

A color mask starting with a hash (#) that describes the hexadecimal RGB colors with black being #000000 and white being #ffffff.

*context\_component*

The context component name that must be one of the following:\

user, role, type or range

Each *context\_component* *string* ... entry is on a new line.

*string*

This is the  *context\_component* string that will be matched with the  *raw* context component passed by [**selinux\_raw\_context\_to\_color**(3)](/selinux_raw_context_to_color/3.md).\
 A wildcard '\*' may be used to match any undefined string for the user, role and type  *context\_component* entries only.

*fg\_color\_name*

The color\_name string that will be used as the foreground color. A  *color\_mask* may also be used.

*bg\_color\_name*

The color\_name string that will be used as the background color. A  *color\_mask* may also be used.

## EXAMPLES

Example 1 entries are:

color black  = #000000\
 color green  = #008000\
 color yellow = #ffff00\
 color blue   = #0000ff\
 color white  = #ffffff\
 color red    = #ff0000\
 color orange = #ffa500\
 color tan    = #D2B48C

user \* = black white\
 role \* = white black\
 type \* = tan orange\
 range s0-s0:c0.c1023 = black green\
 range s1-s1:c0.c1023 = white green\
 range s3-s3:c0.c1023 = black tan\
 range s5-s5:c0.c1023 = white blue\
 range s7-s7:c0.c1023 = black red\
 range s9-s9:c0.c1023 = black orange\
 range s15-s15:c0.c1023   = black yellow

Example 2 entries are:

color black  = #000000\
 color green  = #008000\
 color yellow = #ffff00\
 color blue   = #0000ff\
 color white  = #ffffff\
 color red    = #ff0000\
 color orange = #ffa500\
 color tan    = #d2b48c

user unconfined\_u = #ff0000 green\
 role unconfined\_r = red #ffffff\
 type unconfined\_t = red orange\
 user user\_u       = black green\
 role user\_r       = white black\
 type user\_t       = tan red\
 user xguest\_u     = black yellow\
 role xguest\_r     = black red\
 type xguest\_t     = black green\
 user sysadm\_u     = white black\
 range s0-s0:c0.c1023 = black white\
 user \*            = black white\
 role \*            = black white\
 type \*            = black white

## SEE ALSO

[**selinux**(8)](/selinux/8.md), [**selinux\_raw\_context\_to\_color**(3)](/selinux_raw_context_to_color/3.md), [**selinux\_colors\_path**(3)](/selinux_colors_path/3.md)