4/32

List of Tables

1-1 Oracle Label Security Administrative Packages
2-1 Data Dimensions for Controlling Access to Data
2-2 Sensitivity Label Components
2-3 Level Example
2-4 Forms of Specifying Levels
2-5 Compartment Example
2-6 Forms of Specifying Compartments
2-7 Group Example
2-8 Forms of Specifying Groups
2-9 Typical Levels, Compartments, and Groups, by Industry
3-1 Authorized Levels Set by the Administrator
3-2 Computed Session Labels
3-3 Oracle Label Security Privileges
3-4 Types of Privilege
5-1 Sensitivity Data Label Components
5-2 Policy Level Example
5-3 Forms of Specifying Levels
5-4 Policy Compartment Example
5-5 Forms of Specifying Compartments
5-6 Group Example
5-7 Forms of Specifying Groups
5-8 Authorized Levels Set by the Administrator
5-9 Oracle Label Security Privileges
5-10 Auditing Options for Oracle Label Security
6-1 Administratively Defined Label Tags (Example)
6-2 Generated Label Tags (Example)
6-3 Data Returned from Sample SQL Statements re Hidden Column
6-4 Data Returned from Sample SQL Statements re Least_UBound
6-5 MERGE_LABEL Format Constants
7-1 Contents of Each Policy
7-2 Elements in a DIP Provisioning Profile
7-3 Tasks That Certain Entities Can Perform
7-4 Access Levels Allowed by Users in OID
7-5 Procedures Superseded by olsadmintool When Using Oracle Internet Directory
8-1 When Policy Enforcement Options Take Effect
8-2 Policy Enforcement Options
8-3 What Policy Enforcement Options Control
8-4 Suggested Policy Enforcement Option Combinations
10-1 AUDIT_TRAIL Parameter Settings
12-1 Input Choices for Oracle Label Security Input to SQL*Loader
12-2 Label Tag Performance Example: Correct Values
12-3 Label Tag Performance Example: Incorrect Values
13-1 Access to Standard Groups and Inverse Groups
13-2 Policy Example
13-3 Computed Session Labels with Inverse Groups
13-4 Sets of Groups for Evaluating Read and Write Access
13-5 Read and Write Authorizations for Standard Groups and Inverse Groups
13-6 Labels for Inverse Groups Example 1
13-7 Labels for Inverse Groups Example 2
13-8 Access Authorized by Values of access_mode Parameter
13-9 Assigning Groups to a User
13-10 Inverse Group Label Definitions
B-1 Dominance in the Comparison of Labels
B-2 Functions to Determine Dominance
B-3 OLS_DOMINATES Parameters
B-4 OLS_LABEL_DOMINATES Parameters
B-5 OLS_STRICTLY_DOMINATES Parameters
B-6 OLS_STRICTLY_DOMINATES Parameters
B-7 OLS_DOMINATES Parameters
B-8 SA_UTL.DOMINATES Parameters
B-9 SA_UTL.STRICTLY_DOMINATES Parameters
B-10 SA_UTL.DOMINATED_BY Parameters
B-11 SA_UTL.STRICTLY_DOMINATED_BY Parameters
B-12 ORA_GET_AUDITED_LABEL Parameters
C-1 Oracle Label Security Commands in Categories
C-2 olsadmintool Commands Linked to Their Explanations
C-3 Summary: olsadmintool Command Parameters
C-4 Summary of Profile and Default Command Parameters
C-5 Label Component Definitions from Using olsadmintool Commands
C-6 Contents of Profile1 from Using olsadmintool Commands
D-1 Policy Functions Preserving Status in an Oracle RAC Environment
D-2 Session Functions Preserving Status in an Oracle RAC Environment
E-1 SA_AUDIT_ADMIN PL/SQL Package Contents
E-2 SA_AUDIT_ADMIN.AUDIT Parameters
E-3 SA_AUDIT_ADMIN.AUDIT_LABEL Parameter
E-4 SA_AUDIT_ADMIN.AUDIT_LABEL_ENABLED Parameter
E-5 SA_AUDIT_ADMIN.CREATE_VIEW Parameters
E-6 SA_AUDIT_ADMIN.DROP_VIEW Parameters
E-7 SA_AUDIT_ADMIN.NO_AUDIT Parameters
E-8 SA_AUDIT_ADMIN.NO_AUDIT_LABEL Parameter
E-9 SA_COMPONENTS PL/SQL Package Contents
E-10 SA_COMPONENTS.ALTER_COMPARTMENT Parameters
E-11 SA_COMPONENTS.ALTER_GROUP Parameters
E-12 SA_COMPONENTS.ALTER_GROUP_PARENT Parameters
E-13 SA_COMPONENTS.ALTER_LEVEL Parameters
E-14 SA_COMPONENTS.CREATE_COMPARTMENT Parameters
E-15 SA_COMPONENTS.CREATE_GROUP Parameters
E-16 SA_COMPONENTS.CREATE_LEVEL Parameters
E-17 SA_COMPONENTS.DROP_COMPARTMENT Parameters
E-18 SA_COMPONENTS.DROP_GROUP Parameters
E-19 SA_COMPONENTS.DROP_LEVEL Parameters
E-20 SA_LABEL_ADMIN PL/SQL Package Contents
E-21 SA_LABEL_ADMIN.ALTER_LABEL Parameters
E-22 SA_LABEL_ADMIN.CREATE_LABEL Parameters
E-23 SA_LABEL_ADMIN.DROP_LABEL Parameters
E-24 SA_POLICY_ADMIN PL/SQL Package Contents
E-25 SA_POLICY_ADMIN.ALTER_SCHEMA Parameters
E-26 SA_POLICY_ADMIN.APPLY_SCHEMA_POLICY Parameters
E-27 SA_POLICY_ADMIN.APPLY_TABLE_POLICY Parameters
E-28 SA_POLICY_ADMIN.DISABLE_SCHEMA_POLICY Parameters
E-29 SA_POLICY_ADMIN.DISABLE_TABLE_POLICY Parameters
E-30 SA_POLICY_ADMIN.ENABLE_SCHEMA_POLICY Parameters
E-31 SA_POLICY_ADMIN.ENABLE_TABLE_POLICY Parameters
E-32 SA_POLICY_ADMIN.POLICY_SUBSCRIBE Parameter
E-33 SA_POLICY_ADMIN.POLICY_UNSUBSCRIBE Parameters
E-34 SA_POLICY_ADMIN.REMOVE_SCHEMA_POLICY Parameters
E-35 SA_POLICY_ADMIN.REMOVE_TABLE_POLICY Parameters
E-36 SA_SESSSION PL/SQL Package Contents
E-37 SA_SESSION.COMP_READ Parameter
E-38 SA_SESSION.COMP_WRITE Parameter
E-39 SA_SESSION.GROUP_READ Parameter
E-40 SA_SESSION.GROUP_WRITE Parameter
E-41 SA_SESSION.LABEL Parameter
E-42 SA_SESSION.MAX_LEVEL Parameter
E-43 SA_SESSION.MAX_READ_LABEL Parameter
E-44 SA_SESSION.MAX_WRITE_LABEL Parameter
E-45 SA_SESSION.MIN_LEVEL Parameter
E-46 SA_SESSION.MIN_WRITE_LABEL Parameter
E-47 SA_SESSION.Privs Parameter
E-48 SA_SESSION.RESTORE_DEFAULT_LABEL Parameter
E-49 SA_SESSION.ROW_LABEL Parameters
E-50 SA_SESSION.SET_LABEL Parameters
E-51 SA_SESSION.SA_USER_NAME Parameters
E-52 SA_SESSION.SAVE_DEFAULT_LABELS Parameter
E-53 SA_SESSION.SET_ACCESS_PROFILE Parameters
E-54 SA_SESSION.SET_ROW_LABEL Parameters
E-55 SA_SYSDBA PL/SQL Package Contents
E-56 SA_SYSDBA.ALTER_POLICY Parameters
E-57 SA_SYSDBA.CREATE_POLICY Parameters
E-58 SA_SYSDBA.DISABLE_POLICY Parameters
E-59 SA_SYSDBA.DROP_POLICY Parameters
E-60 SA_SYSDBA.ENABLE_POLICY Parameters
E-61 SA_USER_ADMIN PL/SQL Package Contents
E-62 SA_USER_ADMIN.ADD_COMPARTMENTS Parameters
E-63 SA_USER_ADMIN.ADD_GROUPS Parameters
E-64 SA_USER_ADMIN.ALTER_COMPARTMENTS Parameters
E-65 SA_USER_ADMIN.ALTER_GROUPS Parameters
E-66 SA_USER_ADMIN.DROP_ALL_COMPARTMENTS Parameters
E-67 SA_USER_ADMIN.DROP_ALL_GROUPS Parameters
E-68 SA_USER_ADMIN.DROP_COMPARTMENTS Parameters
E-69 SA_USER_ADMIN.DROP_GROUPS Parameters
E-70 SA_USER_ADMIN.DROP_USER_ACCESS Parameters
E-71 SA_USER_ADMIN.SET_COMPARTMENTS Parameters
E-72 SA_USER_ADMIN.SET_DEFAULT_LABEL Parameters
E-73 SA_USER_ADMIN.SET_GROUPS Parameters
E-74 SA_USER_ADMIN.SET_LEVELS Parameters
E-75 SA_SESSION.SET_LABEL Parameters
E-76 SA_USER_ADMIN.SET_ROW_LABEL Parameters
E-77 SA_USER_ADMIN.SET_USER_LABELS Parameters
E-78 SA_USER_ADMIN.SET_USER_PRIVS Parameters
E-79 SA_UTL PL/SQL PL/SQL Package Contents
E-80 SA_UTL.CHECK_LABEL_CHANGE Parameters
E-81 SA_UTL.CHECK_READ Parameters
E-82 SA_UTL.CHECK_WRITE Parameters
E-83 SA_UTL.DATA_LABEL Parameter
E-84 SA_UTL.GREATEST_LBOUND Parameters
E-85 SA_UTL.LEAST_UBOUND Parameters
E-86 SA_UTL.NUMERIC_LABEL Parameter
E-87 SA_UTL.NUMERIC_ROW_LABEL Parameters
E-88 SA_UTL.SET_LABEL Parameters
E-89 SA_UTL.SET_ROW_LABEL Parameters