List of Tables

• 1-1 Access Mediation Factors in Oracle Label Security
• 2-1 Sensitivity Label Components
• 2-2 Level Example
• 2-3 Forms of Specifying Levels
• 2-4 Compartment Example
• 2-5 Forms of Specifying Compartments
• 2-6 Group Example
• 2-7 Forms of Specifying Groups
• 2-8 Typical Levels, Compartments, and Groups, by Industry
• 3-1 Authorized Levels Set by the Administrator
• 3-2 Computed Session Labels
• 3-3 Oracle Label Security Privileges
• 3-4 Types of Privilege
• 4-1 Administratively Defined Label Tags (Example)
• 4-2 Generated Label Tags (Example)
• 4-3 Data Returned from Sample SQL Statements re Hidden Column
• 4-4 Data Returned from Sample SQL Statements re Least_UBound
• 4-5 MERGE_LABEL Format Constants
• 4-6 Functions to Change Session Labels
• 4-7 Security Attribute Names and Types
• 4-8 SA_SESSION Functions to View Security Attributes
• 5-1 Contents of Each Policy
• 5-2 Elements in a DIP Provisioning Profile
• 5-3 Tasks That Certain Entities Can Perform
• 5-4 Access Levels Allowed by Users in OID
• 5-5 Procedures Superseded by olsadmintool When Using Oracle Internet Directory
• 6-1 Oracle Label Security Administrative Packages
• 6-2 Parameters for SA_SYSDBA.CREATE_POLICY
• 6-3 Parameters for SA_SYSDBA.ALTER_POLICY
• 6-4 Parameters for SA_SYSDBA.DISABLE_POLICY
• 6-5 Parameters for SA_SYSDBA.ENABLE_POLICY
• 6-6 Parameters for SA_SYSDBA.DROP_POLICY
• 6-7 Parameters for SA_COMPONENTS.CREATE_LEVEL
• 6-8 Parameters for SA_COMPONENTS.ALTER_LEVEL
• 6-9 Parameters for SA_COMPONENTS.DROP_LEVEL
• 6-10 Parameters for SA_COMPONENTS.CREATE_COMPARTMENT
• 6-11 Parameters for SA_COMPONENTS.ALTER_COMPARTMENT
• 6-12 Parameters for SA_COMPONENTS.DROP_COMPARTMENT
• 6-13 Parameters for SA_COMPONENTS.CREATE_GROUP
• 6-14 Parameters for SA_COMPONENTS.ALTER_GROUP
• 6-15 Parameters for SA_COMPONENTS.ALTER_GROUP_PARENT
• 6-16 Parameters for SA_COMPONENTS.DROP_GROUP
• 6-17 Parameters for SA_LABEL_ADMIN.CREATE_LABEL
• 6-18 Parameters for SA_LABEL_ADMIN.ALTER_LABEL
• 6-19 Parameters for SA_LABEL_ADMIN.DROP_LABEL
• 7-1 Parameters for SA_USER_ADMIN.SET_LEVELS
• 7-2 Parameters for SA_USER_ADMIN.SET_COMPARTMENTS
• 7-3 Parameters for SA_USER_ADMIN.SET_GROUPS
• 7-4 Parameters for SA_USER_ADMIN.ALTER_COMPARTMENTS
• 7-5 Parameters for SA_USER_ADMIN.ADD_COMPARTMENTS
• 7-6 Parameters for SA_USER_ADMIN.DROP_COMPARTMENTS
• 7-7 Parameters for SA_USER_ADMIN.DROP_ALL_COMPARTMENTS
• 7-8 Parameters for SA_USER_ADMIN.ADD_GROUPS
• 7-9 Parameters for SA_USER_ADMIN.ALTER_GROUPS
• 7-10 Parameters for SA_USER_ADMIN.DROP_GROUPS
• 7-11 Parameters for SA_USER_ADMIN.DROP_ALL_GROUPS
• 7-12 Parameters for SA_USER_ADMIN.SET_USER_LABELS
• 7-13 Parameters for SA_USER_ADMIN.SET_DEFAULT_LABEL
• 7-14 Parameters for SA_USER_ADMIN.SET_ROW_LABEL
• 7-15 Parameters for SA_USER_ADMIN.DROP_USER_ACCESS
• 7-16 Parameters for SA_USER_ADMIN.SET_USER_PRIVS
• 7-17 Parameters for SA_SESSION.SET_ACCESS_PROFILE
• 7-18 Parameters for SA_SESSION.SA_USER_NAME
• 7-19 Oracle Label Security Views
• 8-1 When Policy Enforcement Options Take Effect
• 8-2 Policy Enforcement Options
• 8-3 What Policy Enforcement Options Control
• 8-4 Suggested Policy Enforcement Option Combinations
• 9-1 Policy Administration Functions
• 11-1 AUDIT_TRAIL Parameter Settings
• 11-2 Auditing Options for Oracle Label Security
• 11-3 Columns in the DBA_SA_AUDIT_OPTIONS View
• 11-4 DBA_SA_AUDIT_OPTIONS Sample Output
• 13-1 Input Choices for Oracle Label Security Input to SQL*Loader
• 13-2 Label Tag Performance Example: Correct Values
• 13-3 Label Tag Performance Example: Incorrect Values
• 14-1 Access to Standard Groups and Inverse Groups
• 14-2 Policy Example
• 14-3 Computed Session Labels with Inverse Groups
• 14-4 Sets of Groups for Evaluating Read and Write Access
• 14-5 Read and Write Authorizations for Standard Groups and Inverse Groups
• 14-6 Labels for Inverse Groups Example 1
• 14-7 Labels for Inverse Groups Example 2
• 14-8 Access Authorized by Values of access_mode Parameter
• 14-9 Assigning Groups to a User
• 14-10 Inverse Group Label Definitions
• A-1 Dominance in the Comparison of Labels
• A-2 Functions to Determine Dominance
• B-1 Oracle Label Security Commands in Categories
• B-2 olsadmintool Commands Linked to Their Explanations
• B-3 Summary: olsadmintool Command Parameters
• B-4 Summary of Profile and Default Command Parameters
• B-5 Label Component Definitions from Using olsadmintool Commands
• B-6 Contents of Profile1 from Using olsadmintool Commands
• D-1 Policy Functions Preserving Status in an RAC Environment
• D-2 Session Functions Preserving Status in an RAC Environment