Oracle label security for Oracle Database Security (OLS)

In the previous article, we discussed how to use VPD to access the rows in an Oracle table (see Oracle Database Security-Virtual Private database (VPD)), which describes an access control technology that is more complex than VPD--ols (Oracle Label Security).

Enable OLS

If your database version is 10g, you will need to install additional OLS components, but if it is 11g, just enable OLS, because the 11g OLS is installed by default, the following is the statement under 11g to start OLS:

C:\users\xianzhu>chopt Enable Lbac  
      
writing to C:/app/xianzhu/product/11.2.0/dbhome_1/install/enable_  
Lbac.log ... MoveFile C:\app\xianzhu\product\11.2.0\dbhome_1/bin/oralbac11.dll.dbl 

C:\app\xianzhu\product\11.2.0\dbhome_ 1/bin/oralbac11.dll

OLS start successfully, restart the database, and then use Sqlplus to log into the database, you will find more "Oracle Label security" message:

C:\users\xianzhu>sqlplus test/test  
      
sql*plus:release 11.2.0.1.0 Production on Sunday June 9 09:40:17 2013  
      
Copyright (c) 1982, Oracle.  All rights reserved.  
      
      
Connecting to:  
Oracle Database 11g Enterprise Edition release 11.2.0.1.0-64bit Production  
with the partitioning, Oracle L Abel Security, OLAP, Data Mining and real  
application testing options

Starting the OLS is still not enough, you need to use DBCA configuration OLS, the main steps are as follows: