selinux_raw_context_to_color(3)      Library Functions Manual     selinux_raw_context_to_color(3)



NAME
       selinux_raw_context_to_color - Return RGB color string for an SELinux security context

SYNOPSIS
       #include <selinux/selinux.h>

       int selinux_raw_context_to_color(char * raw,
              char **color_str);

DESCRIPTION
       selinux_raw_context_to_color()  returns a color_str associated to the raw context raw pro‐
       vided that the mcstransd(8) daemon is running, the policy is an MLS type  policy  (MCS  or
       MLS) and there is a color configuration file secolor.conf(5) (see the FILES section).

       The color_str string is a space separated list of eight hexadecimal RGB triples, each pre‐
       fixed by a hash character (#). These represent the user:role:type:range components of  the
       foreground and background colors. An example string is shown in the EXAMPLE section.

       The returned color_str string must be freed with free(3).

       If  a color has not been configured for a specific user, role, type and/or range component
       of context raw, then selinux_raw_context_to_color() will  select  the  color  returned  in
       color_str in order of precedence as follows:
              role, type, range
              user, type, range
              user, role, range
              user, role, type

       If  there  are no entries in the secolor.conf(5) file for any of the components of context
       raw (or the file is not present), then the default string returned in color_str is:

              ----- user ---- ---- role ----  ---- type ----  ---- range ----
              #000000 #ffffff #000000 #ffffff #000000 #ffffff #000000 #ffffff


RETURN VALUE
       On success, zero is returned.
       On failure, -1 is returned with errno set appropriately.

ERRORS
       ENOENT If the mcstransd(8) daemon is not running.

FILES
       selinux_raw_context_to_color() obtains the translated entry from the  active  policy  sec‐
       olor.conf(5)  file as returned by selinux_colors_path(3).  The file format is described in
       secolor.conf(5).

NOTES
       1. The primary use of selinux_raw_context_to_color() is to return a color that corresponds
       to a range, that can then be used to highlight information at different MLS levels.

       2.  The  mcstransd(8)  daemon  process security level must dominate the raw security level
       passed to it by the selinux_raw_context_to_color()  function.  If  not,  the  range  color
       selected will be as defined by the order of precedence.

EXAMPLE
       selinux_raw_context_to_color() returns the foreground and background colors of the context
       string components (user:role:type:range) as RGB triples as follows:


             user     :       role      :      type      :      range
         fg       bg  :   fg       bg   :  fg       bg   :  fg       bg
       #000000 #ffffff  #ffffff #000000  #d2b48c #ffa500  #000000 #008000
        black   white :  white   black  : tan    orange  : black   green

SEE ALSO
       selinux(8), selinux_colors_path(3), mcstransd(8), secolor.conf(5),
       selinux_raw_to_trans_context(3), selinux_trans_to_raw_context(3), free(3)



SELinux API documentation                 08 April 2011           selinux_raw_context_to_color(3)