List of Tables

• 1-1 Access Mediation Factors in Oracle Label Security
• 2-1 Sensitivity Label Components
• 2-2 Level Example
• 2-3 Forms of Specifying Levels
• 2-4 Compartment Example
• 2-5 Forms of Specifying Compartments
• 2-6 Group Example
• 2-7 Forms of Specifying Groups
• 2-8 Typical Levels, Compartments, and Groups, by Industry
• 3-1 Authorized Levels Set by the Administrator
• 3-2 Computed Session Labels
• 3-3 Oracle Label Security Privileges
• 3-4 Types of Privilege
• 5-1 Administratively Defined Label Tags (Example)
• 5-2 Generated Label Tags (Example)
• 5-3 Data Returned from Sample SQL Statements re Hidden Column
• 5-4 Data Returned from Sample SQL Statements re Least_UBound
• 5-5 MERGE_LABEL Format Constants
• 5-6 Functions to Change Session Labels
• 5-7 Security Attribute Names and Types
• 5-8 SA_SESSION Functions to View Security Attributes
• 6-1 Contents of Each Policy
• 6-2 Elements in a DIP Provisioning Profile
• 6-3 Tasks That Certain Entities Can Perform
• 6-4 Access Levels Allowed by Users in OID
• 6-5 Procedures Superseded by olsadmintool When Using Oracle Internet Directory
• 7-1 Oracle Label Security Administrative Packages
• 7-2 Parameters for SA_SYSDBA.CREATE_POLICY
• 7-3 Parameters for SA_SYSDBA.ALTER_POLICY
• 7-4 Parameters for SA_SYSDBA.DISABLE_POLICY
• 7-5 Parameters for SA_SYSDBA.ENABLE_POLICY
• 7-6 Parameters for SA_SYSDBA.DROP_POLICY
• 7-7 Parameters for SA_COMPONENTS.CREATE_LEVEL
• 7-8 Parameters for SA_COMPONENTS.ALTER_LEVEL
• 7-9 Parameters for SA_COMPONENTS.DROP_LEVEL
• 7-10 Parameters for SA_COMPONENTS.CREATE_COMPARTMENT
• 7-11 Parameters for SA_COMPONENTS.ALTER_COMPARTMENT
• 7-12 Parameters for SA_COMPONENTS.DROP_COMPARTMENT
• 7-13 Parameters for SA_COMPONENTS.CREATE_GROUP
• 7-14 Parameters for SA_COMPONENTS.ALTER_GROUP
• 7-15 Parameters for SA_COMPONENTS.ALTER_GROUP_PARENT
• 7-16 Parameters for SA_COMPONENTS.DROP_GROUP
• 7-17 Parameters for SA_LABEL_ADMIN.CREATE_LABEL
• 7-18 Parameters for SA_LABEL_ADMIN.ALTER_LABEL
• 7-19 Parameters for SA_LABEL_ADMIN.DROP_LABEL
• 8-1 Parameters for SA_USER_ADMIN.SET_LEVELS
• 8-2 Parameters for SA_USER_ADMIN.SET_COMPARTMENTS
• 8-3 Parameters for SA_USER_ADMIN.SET_GROUPS
• 8-4 Parameters for SA_USER_ADMIN.ALTER_COMPARTMENTS
• 8-5 Parameters for SA_USER_ADMIN.ADD_COMPARTMENTS
• 8-6 Parameters for SA_USER_ADMIN.DROP_COMPARTMENTS
• 8-7 Parameters for SA_USER_ADMIN.DROP_ALL_COMPARTMENTS
• 8-8 Parameters for SA_USER_ADMIN.ADD_GROUPS
• 8-9 Parameters for SA_USER_ADMIN.ALTER_GROUPS
• 8-10 Parameters for SA_USER_ADMIN.DROP_GROUPS
• 8-11 Parameters for SA_USER_ADMIN.DROP_ALL_GROUPS
• 8-12 Parameters for SA_USER_ADMIN.SET_USER_LABELS
• 8-13 Parameters for SA_USER_ADMIN.SET_DEFAULT_LABEL
• 8-14 Parameters for SA_USER_ADMIN.SET_ROW_LABEL
• 8-15 Parameters for SA_USER_ADMIN.DROP_USER_ACCESS
• 8-16 Parameters for SA_USER_ADMIN.SET_USER_PRIVS
• 8-17 Parameters for SA_SESSION.SET_ACCESS_PROFILE
• 8-18 Parameters for SA_SESSION.SA_USER_NAME
• 8-19 Oracle Label Security Views
• 9-1 When Policy Enforcement Options Take Effect
• 9-2 Policy Enforcement Options
• 9-3 What Policy Enforcement Options Control
• 9-4 Suggested Policy Enforcement Option Combinations
• 10-1 Policy Administration Functions
• 12-1 AUDIT_TRAIL Parameter Settings
• 12-2 Auditing Options for Oracle Label Security
• 12-3 Columns in the DBA_SA_AUDIT_OPTIONS View
• 12-4 DBA_SA_AUDIT_OPTIONS Sample Output
• 14-1 Input Choices for Oracle Label Security Input to SQL*Loader
• 14-2 Label Tag Performance Example: Correct Values
• 14-3 Label Tag Performance Example: Incorrect Values
• 15-1 Access to Standard Groups and Inverse Groups
• 15-2 Policy Example
• 15-3 Computed Session Labels with Inverse Groups
• 15-4 Sets of Groups for Evaluating Read and Write Access
• 15-5 Read and Write Authorizations for Standard Groups and Inverse Groups
• 15-6 Labels for Inverse Groups Example 1
• 15-7 Labels for Inverse Groups Example 2
• 15-8 Access Authorized by Values of access_mode Parameter
• 15-9 Assigning Groups to a User
• 15-10 Inverse Group Label Definitions
• A-1 Dominance in the Comparison of Labels
• A-2 Functions to Determine Dominance
• B-1 Oracle Label Security Commands in Categories
• B-2 olsadmintool Commands Linked to Their Explanations
• B-3 Summary: olsadmintool Command Parameters
• B-4 Summary of Profile and Default Command Parameters
• B-5 Label Component Definitions from Using olsadmintool Commands
• B-6 Contents of Profile1 from Using olsadmintool Commands
• C-1 Policy Functions Preserving Status in an Oracle RAC Environment
• C-2 Session Functions Preserving Status in an Oracle RAC Environment