Oracle | LBAC_SERVICES

Oracle LBAC_SERVICES Version 21c

General Information

Library Note

Morgan's Library Page Header

Which has the higher priority in your organization: Deploying a new database or securing the ones you already have? Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.

Purpose Label Security Services

AUTHID DEFINER

Dependencies

DBMS_ASSERT	LBAC_EXP	OLS$POLS
DBMS_PRIV_CAPTURE	LBAC_LGSTNDBY_UTIL	OLS$POLT
DBMS_ZHELP	LBAC_POLICY_ADMIN_INT	OLS_ENFORCEMENT
LBAC$SA	LBAC_STANDARD	SA_AUDIT_ADMIN
LBAC$USER_LIBT	LBAC_SYSDBA	SA_COMPONENTS
LBAC_CACHE	OLS$POL	SA_USER_ADMIN_INT
LBAC_EVENTS

Documented No

Exceptions

Error Code	Reason
ORA-12458	Oracle Label Security not enabled
ORA-12459	Oracle Label Security not configured

First Available Not known

Security Model Owned by LBACSYS with EXECUTE granted to SYS

Source {ORACLE_HOME}/rdbms/admin/prvtolsdd

Subprograms

AUDIT_ACTION	EXECUTE_SYS_ACTION	RECREATE_TRIGGERS_UPGRADE
AUDIT_PRIVILEGE	EXPORT_LBACSYS_PACKAGE_GRANTS	SCHEMA_INFO_EXP
CHECK_AUDIT	INSTANCE_INFO_EXP	SET_UGA
ENABLE_OLS

AUDIT_ACTION

Undocumented

Overload 1 lbac_services.audit_action( policy_name IN VARCHAR2, action IN BINARY_INTEGER, success IN BOOLEAN, comment_text IN VARCHAR2);

TBD

Undocumented

Overload 2 lbac_services.audit_action(policy_name IN VARCHAR2);

exec lbacsys.lbac_services.audit_action('UW_RAS_POLICY');

      BEGIN lbacsys.lbac_services.audit_action('UW_RAS_POLICY'); END;

      *

      ERROR at line 1:

      ORA-12458: Oracle Label Security not enabled

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 45

      ORA-06512: at line 1

AUDIT_PRIVILEGE

Undocumented lbac_services.audit_privilege( policy_name IN VARCHAR2, audit_action IN BINARY_INTEGER, privilege IN BINARY_INTEGER, success IN BOOLEAN, comment_text IN VARCHAR2);

TBD

CHECK_AUDIT

Undocumented lbac_services.check_audit( action IN BINARY_INTEGER, error IN BINARY_INTEGER) RETURN BOOLEAN;

BEGIN

        IF lbacsys.lbac_services.check_audit(1, 0) THEN

          dbms_output.put_line('T');

        ELSE

          dbms_output.put_line('F');

        END IF;

      END;

      /

      BEGIN

      *

      ERROR at line 1:

      ORA-12458: Oracle Label Security not enabled

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 54

      ORA-06512: at line 2

ENABLE_OLS

Enable Oracle Label Security lbac_services.enable_ols( usr IN VARCHAR2, enabled_role IN VARCHAR2);

exec lbacsys.lbac_services.enable_ols('ADMIN', 'DBA');

      BEGIN lbacsys.lbac_services.enable_ols('ADMIN', 'DBA'); END;

      *

      ERROR at line 1:

      ORA-12459: Oracle Label Security not configured

      ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 207

      ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 216

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 338

      ORA-06512: at line 1

EXECUTE_SYS_ACTION

Undocumented lbac_services.execute_sys_action( action IN BINARY_INTEGER, arg1 IN VARCHAR2, arg2 IN VARCHAR2, arg3 IN BINARY_INTEGER, arg4 IN VARCHAR2);

TBD

EXPORT_LBACSYS_PACKAGE_GRANTS

Undocumented lbac_services.export_lbacsys_package_grants( package_name IN VARCHAR2, grantor OUT VARCHAR2) RETURN VARCHAR2;

DECLARE

       outVal dbms_id;

       retVal dbms_id;

      BEGIN

        retVal := lbacsys.lbac_services.export_lbacsys_package_grants('UTL_RECOMP', outVal);

        dbms_output.put_line(outVal);

        dbms_output.put_line(retVal);

      END;

      /

      

      PL/SQL procedure successfully completed.

INSTANCE_INFO_EXP

Undocumented lbac_services.instance_info_exp( name IN VARCHAR2, schema IN VARCHAR2, prepost IN BINARY_INTEGER, isdba IN BINARY_INTEGER, version IN VARCHAR2, new_block OUT BINARY_INTEGER, schema_check IN BOOLEAN) RETURN VARCHAR2;

TBD

RECREATE_TRIGGERS_UPGRADE

Undocumented lbac_services.recreate_triggers_upgrade;

exec lbacsys.lbac_services.recreate_triggers_upgrade;

      

      PL/SQL procedure successfully completed.

      

      SELECT owner, object_name, object_type, last_ddl_time

      FROM dba_objects

      WHERE last_ddl_time > SYSDATE-1/96;

      

      OWNER  OBJECT_NAME        OBJECT_TYPE  LAST_DDL_TIME

      ------ ------------------ ------------ --------------------

      SYS    ORA$_ATSK_AUTOSTS  JOB          15-AUG-2021 01:51:45

SCHEMA_INFO_EXP

Undocumented lbac_services.schema_info_exp( schema IN VARCHAR2, prepost IN BINARY_INTEGER, isdba IN BINARY_INTEGER, version IN VARCHAR2, new_block OUT BINARY_INTEGER, schema_check IN BOOLEAN) RETURN VARCHAR2;

TBD

SET_UGA

Undocumented lbac_services.set_uga( flag IN BINARY_INTEGER, value IN VARCHAR2);

TBD