oracle标签安全,使用 Oracle 标签安全性

@ols_create_policies.sqlPrompt

Prompt ***********************************************************************

Prompt Connect as User LBACSYS

Prompt ***********************************************************************

CONNECT lbacsys/lbacsys

Prompt

Prompt ***********************************************************************

Prompt Dropping FACILITY and PRIVACY policies in case they exist

Prompt ***********************************************************************

EXECUTE SA_SYSDBA.DROP_POLICY('FACILITY',TRUE);

EXECUTE SA_SYSDBA.DROP_POLICY('PRIVACY',TRUE);

Prompt

Prompt ***********************************************************************

Prompt Creating FACILITY Policy

Prompt ***********************************************************************

EXECUTE SA_SYSDBA.CREATE_POLICY('FACILITY','FACLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');

Prompt

Prompt ***********************************************************************

Prompt Adding sensitivity levels to FACILITY policy:

Prompt ***********************************************************************

EXECUTE SA_COMPONENTS.CREATE_LEVEL('FACILITY',1000,'P','PUBLIC');

EXECUTE SA_COMPONENTS.CREATE_LEVEL('FACILITY',2000,'S','SENSITIVE');

EXECUTE SA_COMPONENTS.CREATE_LEVEL('FACILITY',3000,'HS','HIGHLY_SENSITIVE');

Prompt

Prompt ***********************************************************************

Prompt Adding groups to FACILITY policy:

Prompt ***********************************************************************

EXECUTE SA_COMPONENTS.CREATE_GROUP('FACILITY',1000,'Global','Global');

EXECUTE SA_COMPONENTS.CREATE_GROUP('FACILITY',101,'US','United States','GLOBAL');

EXECUTE SA_COMPONENTS.CREATE_GROUP('FACILITY',102,'EU','Europe','GLOBAL');

EXECUTE SA_COMPONENTS.CREATE_GROUP('FACILITY',103,'Asia','Asia','GLOBAL');

Prompt

Prompt ***********************************************************************

Prompt Creating Labels for FACILITY policy

Prompt ***********************************************************************

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',1000,'P');

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',2101,'S::US');

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',3101,'HS::US');

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',2103,'S::ASIA');

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL('FACILITY',3103,'HS::ASIA');

Prompt

Prompt ***********************************************************************

Prompt Creating PRIVACY Policy

Prompt ***********************************************************************

EXECUTE SA_SYSDBA.CREATE_POLICY('PRIVACY','PRIVLAB','READ_CONTROL,CHECK_CONTROL,LABEL_DEFAULT,HIDE');

Prompt

Prompt ***********************************************************************

Prompt Adding sensitivity levels to PRIVACY policy

Prompt ***********************************************************************

EXECUTE SA_COMPONENTS.CREATE_LEVEL('PRIVACY',1000,'C','CONFIDENTIAL');

EXECUTE SA_COMPONENTS.CREATE_LEVEL('PRIVACY',2000,'S','SENSITIVE');

Prompt

Prompt ***********************************************************************

Prompt Creating Labels for PRIVACY policy

Prompt ***********************************************************************

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL ('PRIVACY',101000,'C');

EXECUTE SA_LABEL_ADMIN.CREATE_LABEL ('PRIVACY',102000,'S');

Prompt ***********************************************************************

Exit;