Oracle LBAC_SERVICES
Version 21c

General Information
Library Note Morgan's Library Page Header
Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.
Purpose Label Security Services
AUTHID DEFINER
Dependencies
DBMS_ASSERT LBAC_EXP OLS$POLS
DBMS_PRIV_CAPTURE LBAC_LGSTNDBY_UTIL OLS$POLT
DBMS_ZHELP LBAC_POLICY_ADMIN_INT OLS_ENFORCEMENT
LBAC$SA LBAC_STANDARD SA_AUDIT_ADMIN
LBAC$USER_LIBT LBAC_SYSDBA SA_COMPONENTS
LBAC_CACHE OLS$POL SA_USER_ADMIN_INT
LBAC_EVENTS    
Documented No
Exceptions
Error Code Reason
ORA-12458 Oracle Label Security not enabled
ORA-12459 Oracle Label Security not configured
First Available Not known
Security Model Owned by LBACSYS with EXECUTE granted to SYS
Source {ORACLE_HOME}/rdbms/admin/prvtolsdd
Subprograms
 
AUDIT_ACTION
Undocumented

Overload 1
lbac_services.audit_action(
policy_name  IN VARCHAR2,
action       IN BINARY_INTEGER,
success      IN BOOLEAN,
comment_text IN VARCHAR2);
TBD
Undocumented

Overload 2
lbac_services.audit_action(policy_name IN VARCHAR2);
exec lbacsys.lbac_services.audit_action('UW_RAS_POLICY');
BEGIN lbacsys.lbac_services.audit_action('UW_RAS_POLICY'); END;
*
ERROR at line 1:
ORA-12458: Oracle Label Security not enabled
ORA-06512: at "LBACSYS.LBAC_SERVICES", line 45
ORA-06512: at line 1
 
AUDIT_PRIVILEGE
Undocumented lbac_services.audit_privilege(
policy_name  IN VARCHAR2,
audit_action IN BINARY_INTEGER,
privilege    IN BINARY_INTEGER,
success      IN BOOLEAN,
comment_text IN VARCHAR2);
TBD
 
CHECK_AUDIT
Undocumented lbac_services.check_audit(
action IN BINARY_INTEGER,
error  IN BINARY_INTEGER)
RETURN BOOLEAN;
BEGIN
  IF lbacsys.lbac_services.check_audit(1, 0) THEN
    dbms_output.put_line('T');
  ELSE
    dbms_output.put_line('F');
  END IF;
END;
/
BEGIN
*
ERROR at line 1:
ORA-12458: Oracle Label Security not enabled
ORA-06512: at "LBACSYS.LBAC_SERVICES", line 54
ORA-06512: at line 2
 
ENABLE_OLS
Enable Oracle Label Security lbac_services.enable_ols(
usr          IN VARCHAR2,
enabled_role IN VARCHAR2);
exec lbacsys.lbac_services.enable_ols('ADMIN', 'DBA');
BEGIN lbacsys.lbac_services.enable_ols('ADMIN', 'DBA'); END;
*
ERROR at line 1:
ORA-12459: Oracle Label Security not configured
ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 207
ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 216
ORA-06512: at "LBACSYS.LBAC_SERVICES", line 338
ORA-06512: at line 1
 
EXECUTE_SYS_ACTION
Undocumented lbac_services.execute_sys_action(
action IN BINARY_INTEGER,
arg1   IN VARCHAR2,
arg2   IN VARCHAR2,
arg3   IN BINARY_INTEGER,
arg4   IN VARCHAR2);
TBD
 
EXPORT_LBACSYS_PACKAGE_GRANTS
Undocumented lbac_services.export_lbacsys_package_grants(
package_name IN  VARCHAR2,
grantor      OUT VARCHAR2)
RETURN VARCHAR2;
DECLARE
 outVal dbms_id;
 retVal dbms_id;
BEGIN
  retVal := lbacsys.lbac_services.export_lbacsys_package_grants('UTL_RECOMP', outVal);
  dbms_output.put_line(outVal);
  dbms_output.put_line(retVal);
END;
/

PL/SQL procedure successfully completed.
 
INSTANCE_INFO_EXP
Undocumented lbac_services.instance_info_exp(
name         IN  VARCHAR2,
schema       IN  VARCHAR2,
prepost      IN  BINARY_INTEGER,
isdba        IN  BINARY_INTEGER,
version      IN  VARCHAR2,
new_block    OUT BINARY_INTEGER,
schema_check IN  BOOLEAN)
RETURN VARCHAR2;
TBD
 
RECREATE_TRIGGERS_UPGRADE
Undocumented lbac_services.recreate_triggers_upgrade;
exec lbacsys.lbac_services.recreate_triggers_upgrade;

PL/SQL procedure successfully completed.

SELECT owner, object_name, object_type, last_ddl_time
FROM dba_objects
WHERE last_ddl_time > SYSDATE-1/96;

OWNER  OBJECT_NAME        OBJECT_TYPE  LAST_DDL_TIME
------ ------------------ ------------ --------------------
SYS    ORA$_ATSK_AUTOSTS  JOB          15-AUG-2021 01:51:45
 
SCHEMA_INFO_EXP
Undocumented lbac_services.schema_info_exp(
schema       IN  VARCHAR2,
prepost      IN  BINARY_INTEGER,
isdba        IN  BINARY_INTEGER,
version      IN  VARCHAR2,
new_block    OUT BINARY_INTEGER,
schema_check IN  BOOLEAN)
RETURN VARCHAR2;
TBD
 
SET_UGA
Undocumented lbac_services.set_uga(
flag  IN BINARY_INTEGER,
value IN VARCHAR2);
TBD

Related Topics
Built-in Functions
Built-in Packages
Database Security
What's New In 19c
What's New In 20c-21c

Morgan's Library Page Footer
This site is maintained by Dan Morgan. Last Updated: This site is protected by copyright and trademark laws under U.S. and International law. © 1998-2019 Daniel A. Morgan All Rights Reserved
  DBSecWorx