Which has the higher priority in your organization: Deploying a new database or securing the ones you already have?
Looking for a website, and resources, dedicated solely to securing Oracle databases? Check out DBSecWorx.
Purpose
Database Vault MACOLS Utility
AUTHID
DEFINER
Constants
Name
Data Type
Value
Audit action codes
G_MAC_OLS_INIT_AUDIT_CODE
PLS_INTEGER
10009
Dependencies
CODE$
FACTOR$
OLS$LAB
DBA_CONTEXT
FACTOR_LINK$
OLS$LEVELS
DBMS_ASSERT
IDENTITY$
OLS$POL
DBMS_MACAUD
KZV$UTL_LIBT
POLICY_LABEL$
DBMS_MACOLS_SESSION
MACOLS_INIT_SESSION
SA_SESSION
DBMS_MACSEC
MAC_POLICY$
SA_UTL
DBMS_MACUTL
MAC_POLICY_FACTOR$
TO_NUMERIC_LABEL
DBMS_SESSION
NUMERIC_LABEL_TO_CHAR
Documented
No
First Available
Not Known
Security Model
Owned by DVSYS with no privileges granted
Source
{ORACLE_HOME}/rdbms/admin/catmacp.sql
Subprograms
CREATE_MACOLS_CONTEXTS
INIT_SESSION
MIN_POLICY_LABEL_OF
DROP_MACOLS_CONTEXTS
LABEL_OF
UPDATE_POLICY_LABEL_CONTEXT
CREATE_MACOLS_CONTEXTS
Create the contexts used to cache MACOLS labels
dbms_macols.create_macols_contexts(p_policy_name IN VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(create_macols_contexts, AUTO_WITH_COMMIT);
TBD
DROP_MACOLS_CONTEXTS
Drop the contexts used to cache MACOLS labels
dbms_macols.drop_macols_contexts(p_policy_name IN VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(drop_macols_contexts, AUTO_WITH_COMMIT);
TBD
INIT_SESSION
Initializes MACOLS and sets the user's session label
dbms_macols.init_session;
exec dbms_macols.init_session;
LABEL_OF
Computes the label of a factor for the specified policy
dbms_macols.label_of(
p_mac_policy_id IN NUMBER,
p_factor_id IN NUMBER)
RETURN VARCHAR2;
PRAGMA SUPPLEMENTAL_LOG_DATA(label_of, NONE);
TBD
MIN_POLICY_LABEL_OF
Determines the lowest sensitivity level for a policy
dbms_macols.min_policy_label_of(p_mac_policy_id IN NUMBER) RETURN VARCHAR2;
PRAGMA SUPPLEMENTAL_LOG_DATA(min_policy_label_of, NONE);
TBD
UPDATE_POLICY_LABEL_CONTEXT
Sets a value in a MACOLS context
dbms_macols.update_policy_label_context(
p_policy_name IN VARCHAR2,
p_context_type IN VARCHAR2,
p_label IN VARCHAR2);
PRAGMA SUPPLEMENTAL_LOG_DATA(update_policy_label_context, NONE);
