List of Tables

1-1 Access Mediation Factors in Oracle Label Security

2-1 Sensitivity Label Components

2-2 Level Example

2-3 Forms of Specifying Levels

2-4 Compartment Example

2-5 Forms of Specifying Compartments

2-6 Group Example

2-7 Forms of Specifying Groups

2-8 Typical Levels, Compartments, and Groups, by Industry

3-1 Authorized Levels Set by the Administrator

3-2 Computed Session Labels

3-3 Oracle Label Security Privileges

3-4 Types of Privilege

4-1 Administratively Defined Label Tags (Example)

4-2 Generated Label Tags (Example)

4-3 Data Returned from Sample SQL Statements re Hidden Column

4-4 Data Returned from Sample SQL Statements re Least_UBound

4-5 MERGE_LABEL Format Constants

4-6 Functions to Change Session Labels

4-7 Security Attribute Names and Types

4-8 SA_SESSION Functions to View Security Attributes

5-1 Contents of Each Policy

5-2 Elements in a DIP Provisioning Profile

5-3 Tasks That Certain Entities Can Perform

5-4 Access Levels Allowed by Users in OID

5-5 Procedures Superseded by olsadmintool When Using Oracle Internet Directory

6-1 Oracle Label Security Administrative Packages

6-2 Parameters for SA_SYSDBA.CREATE_POLICY

6-3 Parameters for SA_SYSDBA.ALTER_POLICY

6-4 Parameters for SA_SYSDBA.DISABLE_POLICY

6-5 Parameters for SA_SYSDBA.ENABLE_POLICY

6-6 Parameters for SA_SYSDBA.DROP_POLICY

6-7 Parameters for SA_COMPONENTS.CREATE_LEVEL

6-8 Parameters for SA_COMPONENTS.ALTER_LEVEL

6-9 Parameters for SA_COMPONENTS.DROP_LEVEL

6-10 Parameters for SA_COMPONENTS.CREATE_COMPARTMENT

6-11 Parameters for SA_COMPONENTS.ALTER_COMPARTMENT

6-12 Parameters for SA_COMPONENTS.DROP_COMPARTMENT

6-13 Parameters for SA_COMPONENTS.CREATE_GROUP

6-14 Parameters for SA_COMPONENTS.ALTER_GROUP

6-15 Parameters for SA_COMPONENTS.ALTER_GROUP_PARENT

6-16 Parameters for SA_COMPONENTS.DROP_GROUP

6-17 Parameters for SA_LABEL_ADMIN.CREATE_LABEL

6-18 Parameters for SA_LABEL_ADMIN.ALTER_LABEL

6-19 Parameters for SA_LABEL_ADMIN.DROP_LABEL

7-1 Parameters for SA_USER_ADMIN.SET_LEVELS

7-2 Parameters for SA_USER_ADMIN.SET_COMPARTMENTS

7-3 Parameters for SA_USER_ADMIN.SET_GROUPS

7-4 Parameters for SA_USER_ADMIN.ALTER_COMPARTMENTS

7-5 Parameters for SA_USER_ADMIN.ADD_COMPARTMENTS

7-6 Parameters for SA_USER_ADMIN.DROP_COMPARTMENTS

7-7 Parameters for SA_USER_ADMIN.DROP_ALL_COMPARTMENTS

7-8 Parameters for SA_USER_ADMIN.ADD_GROUPS

7-9 Parameters for SA_USER_ADMIN.ALTER_GROUPS

7-10 Parameters for SA_USER_ADMIN.DROP_GROUPS

7-11 Parameters for SA_USER_ADMIN.DROP_ALL_GROUPS

7-12 Parameters for SA_USER_ADMIN.SET_USER_LABELS

7-13 Parameters for SA_USER_ADMIN.SET_DEFAULT_LABEL

7-14 Parameters for SA_USER_ADMIN.SET_ROW_LABEL

7-15 Parameters for SA_USER_ADMIN.DROP_USER_ACCESS

7-16 Parameters for SA_USER_ADMIN.SET_USER_PRIVS

7-17 Parameters for SA_SESSION.SET_ACCESS_PROFILE

7-18 Parameters for SA_SESSION.SA_USER_NAME

7-19 Oracle Label Security Views

8-1 When Policy Enforcement Options Take Effect

8-2 Policy Enforcement Options

8-3 What Policy Enforcement Options Control

8-4 Suggested Policy Enforcement Option Combinations

9-1 Policy Administration Functions

11-1 AUDIT_TRAIL Parameter Settings

11-2 Auditing Options for Oracle Label Security

11-3 Columns in the DBA_SA_AUDIT_OPTIONS View

11-4 DBA_SA_AUDIT_OPTIONS Sample Output

13-1 Input Choices for Oracle Label Security Input to SQL*Loader

13-2 Label Tag Performance Example: Correct Values

13-3 Label Tag Performance Example: Incorrect Values

14-1 Access to Standard Groups and Inverse Groups

14-2 Policy Example

14-3 Computed Session Labels with Inverse Groups

14-4 Sets of Groups for Evaluating Read and Write Access

14-5 Read and Write Authorizations for Standard Groups and Inverse Groups

14-6 Labels for Inverse Groups Example 1

14-7 Labels for Inverse Groups Example 2

14-8 Access Authorized by Values of access_mode Parameter

14-9 Assigning Groups to a User

14-10 Inverse Group Label Definitions

A-1 Dominance in the Comparison of Labels

A-2 Functions to Determine Dominance

B-1 Oracle Label Security Commands in Categories

B-2 olsadmintool Commands Linked to Their Explanations

B-3 Summary: olsadmintool Command Parameters

B-4 Summary of Profile and Default Command Parameters

B-5 Label Component Definitions from Using olsadmintool Commands

B-6 Contents of Profile1 from Using olsadmintool Commands

D-1 Policy Functions Preserving Status in an RAC Environment

D-2 Session Functions Preserving Status in an RAC Environment