Oracle | LBAC_SERVICES

Oracle LBAC_SERVICES Version 21c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose Label Security Services

AUTHID DEFINER

Dependencies

DBMS_ASSERT	LBAC_EXP	OLS$POLS
DBMS_PRIV_CAPTURE	LBAC_LGSTNDBY_UTIL	OLS$POLT
DBMS_ZHELP	LBAC_POLICY_ADMIN_INT	OLS_ENFORCEMENT
LBAC$SA	LBAC_STANDARD	SA_AUDIT_ADMIN
LBAC$USER_LIBT	LBAC_SYSDBA	SA_COMPONENTS
LBAC_CACHE	OLS$POL	SA_USER_ADMIN_INT
LBAC_EVENTS

Documented No

Exceptions

Error Code	Reason
ORA-12458	Oracle Label Security not enabled
ORA-12459	Oracle Label Security not configured

First Available Not known

Security Model Owned by LBACSYS with EXECUTE granted to SYS

Source {ORACLE_HOME}/rdbms/admin/prvtolsdd

Subprograms

AUDIT_ACTION	EXECUTE_SYS_ACTION	RECREATE_TRIGGERS_UPGRADE
AUDIT_PRIVILEGE	EXPORT_LBACSYS_PACKAGE_GRANTS	SCHEMA_INFO_EXP
CHECK_AUDIT	INSTANCE_INFO_EXP	SET_UGA
ENABLE_OLS

AUDIT_ACTION

Undocumented

Overload 1 lbac_services.audit_action( policy_name IN VARCHAR2, action IN BINARY_INTEGER, success IN BOOLEAN, comment_text IN VARCHAR2);

TBD

Undocumented

Overload 2 lbac_services.audit_action(policy_name IN VARCHAR2);

exec lbacsys.lbac_services.audit_action('UW_RAS_POLICY');

      BEGIN lbacsys.lbac_services.audit_action('UW_RAS_POLICY'); END;

      *

      ERROR at line 1:

      ORA-12458: Oracle Label Security not enabled

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 45

      ORA-06512: at line 1

AUDIT_PRIVILEGE

Undocumented lbac_services.audit_privilege( policy_name IN VARCHAR2, audit_action IN BINARY_INTEGER, privilege IN BINARY_INTEGER, success IN BOOLEAN, comment_text IN VARCHAR2);

TBD

CHECK_AUDIT

Undocumented lbac_services.check_audit( action IN BINARY_INTEGER, error IN BINARY_INTEGER) RETURN BOOLEAN;

BEGIN

        IF lbacsys.lbac_services.check_audit(1, 0) THEN

          dbms_output.put_line('T');

        ELSE

          dbms_output.put_line('F');

        END IF;

      END;

      /

      BEGIN

      *

      ERROR at line 1:

      ORA-12458: Oracle Label Security not enabled

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 54

      ORA-06512: at line 2

ENABLE_OLS

Enable Oracle Label Security lbac_services.enable_ols( usr IN VARCHAR2, enabled_role IN VARCHAR2);

exec lbacsys.lbac_services.enable_ols('ADMIN', 'DBA');

      BEGIN lbacsys.lbac_services.enable_ols('ADMIN', 'DBA'); END;

      *

      ERROR at line 1:

      ORA-12459: Oracle Label Security not configured

      ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 207

      ORA-06512: at "LBACSYS.LBAC_LGSTNDBY_UTIL", line 216

      ORA-06512: at "LBACSYS.LBAC_SERVICES", line 338

      ORA-06512: at line 1

EXECUTE_SYS_ACTION

Undocumented lbac_services.execute_sys_action( action IN BINARY_INTEGER, arg1 IN VARCHAR2, arg2 IN VARCHAR2, arg3 IN BINARY_INTEGER, arg4 IN VARCHAR2);

TBD

EXPORT_LBACSYS_PACKAGE_GRANTS

Undocumented lbac_services.export_lbacsys_package_grants( package_name IN VARCHAR2, grantor OUT VARCHAR2) RETURN VARCHAR2;

DECLARE

       outVal dbms_id;

       retVal dbms_id;

      BEGIN

        retVal := lbacsys.lbac_services.export_lbacsys_package_grants('UTL_RECOMP', outVal);

        dbms_output.put_line(outVal);

        dbms_output.put_line(retVal);

      END;

      /

      

      PL/SQL procedure successfully completed.

INSTANCE_INFO_EXP

Undocumented lbac_services.instance_info_exp( name IN VARCHAR2, schema IN VARCHAR2, prepost IN BINARY_INTEGER, isdba IN BINARY_INTEGER, version IN VARCHAR2, new_block OUT BINARY_INTEGER, schema_check IN BOOLEAN) RETURN VARCHAR2;

TBD

RECREATE_TRIGGERS_UPGRADE

Undocumented lbac_services.recreate_triggers_upgrade;

exec lbacsys.lbac_services.recreate_triggers_upgrade;

      

      PL/SQL procedure successfully completed.

      

      SELECT owner, object_name, object_type, last_ddl_time

      FROM dba_objects

      WHERE last_ddl_time > SYSDATE-1/96;

      

      OWNER  OBJECT_NAME        OBJECT_TYPE  LAST_DDL_TIME

      ------ ------------------ ------------ --------------------

      SYS    ORA$_ATSK_AUTOSTS  JOB          15-AUG-2021 01:51:45

SCHEMA_INFO_EXP

Undocumented lbac_services.schema_info_exp( schema IN VARCHAR2, prepost IN BINARY_INTEGER, isdba IN BINARY_INTEGER, version IN VARCHAR2, new_block OUT BINARY_INTEGER, schema_check IN BOOLEAN) RETURN VARCHAR2;

TBD

SET_UGA

Undocumented lbac_services.set_uga( flag IN BINARY_INTEGER, value IN VARCHAR2);

TBD