xvi
List of Tables
1–1 Access Mediation Factors in Oracle Label Security.............................................................. 1-7
2–1 Sensitivity Label Components ................................................................................................. 2-2
2–2 Level Example............................................................................................................................ 2-3
2–3 Forms of Specifying Levels....................................................................................................... 2-4
2–4 Compartment Example............................................................................................................. 2-4
2–5 Forms of Specifying Compartments ....................................................................................... 2-5
2–6 Group Example .......................................................................................................................... 2-6
2–7 Forms of Specifying Groups..................................................................................................... 2-7
2–8 Typical Levels, Compartments, and Groups, by Industry .................................................. 2-8
3–1 Authorized Levels Set by the Administrator......................................................................... 3-4
3–2 Computed Session Labels......................................................................................................... 3-7
3–3 Oracle Label Security Privileges........................................................................................... 3-12
3–4 Types of Privilege ................................................................................................................... 3-15
5–1 Administratively Defined Label Tags (Example).................................................................. 5-3
5–2 Generated Label Tags (Example)............................................................................................. 5-4
5–3 Data Returned from Sample SQL Statements re Hidden Column..................................... 5-7
5–4 Data Returned from Sample SQL Statements re Least_UBound........................................ 5-9
5–5 MERGE_LABEL Format Constants...................................................................................... 5-10
5–6 Functions to Change Session Labels .................................................................................... 5-14
5–7 Security Attribute Names and Types................................................................................... 5-16
5–8 SA_SESSION Functions to View Security Attributes........................................................ 5-17
6–1 Contents of Each Policy............................................................................................................. 6-9
6–2 Elements in a DIP Provisioning Profile ............................................................................... 6-12
6–3 Tasks That Certain Entities Can Perform............................................................................ 6-17
6–4 Access Levels Allowed by Users in OID ............................................................................. 6-17
6–5 Procedures Superseded by olsadmintool When Using Oracle Internet Directory....... 6-18
7–1 Oracle Label Security Administrative Packages ................................................................... 7-9
7–2 Parameters for SA_SYSDBA.CREATE_POLICY................................................................ 7-11
7–3 Parameters for SA_SYSDBA.ALTER_POLICY................................................................... 7-12
7–4 Parameters for SA_SYSDBA.DISABLE_POLICY............................................................... 7-12
7–5 Parameters for SA_SYSDBA.ENABLE_POLICY................................................................ 7-13
7–6 Parameters for SA_SYSDBA.DROP_POLICY..................................................................... 7-13
7–7 Parameters for SA_COMPONENTS.CREATE_LEVEL..................................................... 7-14
7–8 Parameters for SA_COMPONENTS.ALTER_LEVEL ....................................................... 7-15
7–9 Parameters for SA_COMPONENTS.DROP_LEVEL......................................................... 7-15
7–10 Parameters for SA_COMPONENTS.CREATE_COMPARTMENT................................. 7-16
7–11 Parameters for SA_COMPONENTS.ALTER_COMPARTMENT.................................... 7-16
7–12 Parameters for SA_COMPONENTS.DROP_COMPARTMENT...................................... 7-17
7–13 Parameters for SA_COMPONENTS.CREATE_GROUP................................................... 7-17
7–14 Parameters for SA_COMPONENTS.ALTER_GROUP...................................................... 7-18
7–15 Parameters for SA_COMPONENTS.ALTER_GROUP_PARENT ................................... 7-18
7–16 Parameters for SA_COMPONENTS.DROP_GROUP........................................................ 7-19
7–17 Parameters for SA_LABEL_ADMIN.CREATE_LABEL.................................................... 7-19
7–18 Parameters for SA_LABEL_ADMIN.ALTER_LABEL....................................................... 7-20
7–19 Parameters for SA_LABEL_ADMIN.DROP_LABEL ........................................................ 7-21
8–1 Parameters for SA_USER_ADMIN.SET_LEVELS ................................................................ 8-2
8–2 Parameters for SA_USER_ADMIN.SET_COMPARTMENTS............................................. 8-3
8–3 Parameters for SA_USER_ADMIN.SET_GROUPS............................................................... 8-3
8–4 Parameters for SA_USER_ADMIN.ALTER_COMPARTMENTS....................................... 8-4
8–5 Parameters for SA_USER_ADMIN.ADD_COMPARTMENTS .......................................... 8-5
8–6 Parameters for SA_USER_ADMIN.DROP_COMPARTMENTS ........................................ 8-5
8–7 Parameters for SA_USER_ADMIN.DROP_ALL_COMPARTMENTS .............................. 8-6
8–8 Parameters for SA_USER_ADMIN.ADD_GROUPS ............................................................ 8-6