NAME |SYNOPSIS |DESCRIPTION |RETURN VALUE |ERRORS |FILES |NOTES |EXAMPLE |SEE ALSO |COLOPHON | |
selinux_r..._to_color(3) Library Functions Manualselinux_r..._to_color(3)selinux_raw_context_to_color - Return RGB color string for an SELinux security context
#include <selinux/selinux.h>int selinux_raw_context_to_color(const char *raw,char **color_str);
selinux_raw_context_to_color() returns acolor_str associated to the raw contextraw provided that themcstransd(8) daemon is running, the policy is an MLS type policy (MCS or MLS) and there is a color configuration filesecolor.conf(5) (see theFILES section). Thecolor_str string is a space separated list of eight hexadecimal RGB triples, each prefixed by a hash character (#). These represent the user:role:type:range components of the foreground and background colors. An example string is shown in theEXAMPLEsection. The returnedcolor_str string must be freed withfree(3). If a color has not been configured for a specific user, role, type and/or range component of contextraw, thenselinux_raw_context_to_color() will select the color returned incolor_str in order of precedence as follows: role, type, range user, type, range user, role, range user, role, type If there are no entries in thesecolor.conf(5) file for any of the components of contextraw (or the file is not present), then the default string returned incolor_str is: ----- user ---- ---- role ---- ---- type ---- ---- range ---- #000000 #ffffff #000000 #ffffff #000000 #ffffff #000000 #ffffff
On success, zero is returned. On failure, -1 is returned witherrno set appropriately.
ENOENTIf themcstransd(8) daemon is not running.
selinux_raw_context_to_color() obtains the translated entry from the active policysecolor.conf(5) file as returned byselinux_colors_path(3). The file format is described insecolor.conf(5).
1. The primary use ofselinux_raw_context_to_color() is to return a color that corresponds to a range, that can then be used to highlight information at different MLS levels. 2. Themcstransd(8) daemon process security level must dominate theraw security level passed to it by theselinux_raw_context_to_color() function. If not, the range color selected will be as defined by the order of precedence.
selinux_raw_context_to_color() returns the foreground and background colors of the context string components (user:role:type:range) as RGB triples as follows: user : role : type : range fg bg : fg bg : fg bg : fg bg #000000 #ffffff #ffffff #000000 #d2b48c #ffa500 #000000 #008000 black white : white black : tan orange : black green
selinux(8),selinux_colors_path(3),mcstransd(8),secolor.conf(5),selinux_raw_to_trans_context(3),selinux_trans_to_raw_context(3),free(3)
This page is part of theselinux (Security-Enhanced Linux user- space libraries and tools) project. Information about the project can be found at ⟨https://github.com/SELinuxProject/selinux/wiki⟩. If you have a bug report for this manual page, see ⟨https://github.com/SELinuxProject/selinux/wiki/Contributing⟩. This page was obtained from the project's upstream Git repository ⟨https://github.com/SELinuxProject/selinux⟩ on 2025-08-11. (At that time, the date of the most recent commit that was found in the repository was 2025-08-04.) If you discover any rendering problems in this HTML version of the page, or you believe there is a better or more up-to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which isnot part of the original manual page), send a mail to man-pages@man7.orgSELinux API documentation 08 April 2011selinux_r..._to_color(3)Pages that refer to this page:selinux_colors_path(3), secolor.conf(5)
HTML rendering created 2025-09-06 byMichael Kerrisk, author ofThe Linux Programming Interface. For details of in-depthLinux/UNIX system programming training courses that I teach, lookhere. Hosting byjambit GmbH. | ![]() |