When last I experimented with this (2007-8), the WS_DEFAULT_FG and _BG are source code options. You need to download the kernel source, and then set in the options in the SOURCE and then RECOMPILE the kernel and then reboot to that custom kernel.
We had a FIPS-compliant operation and we set the firewall and security hosts' _FG console color to a (very readable) light red font color. In this way in cases of admins with multiple remote login screens, the admins and their managers could easily distinguish at-a-glace the screens that were on (or left unattended on) production security hosts/appliances.
/S
__________________
Never argue with an idiot. They will bring you down to their level and beat you with experience. 
|