Oracle DBMS_XDS_INT Built-In Package
Versions 18.1 - 19.4

Security Advisory
The package is an undocumented package supporting Oracle Advanced Security.

Reference to the package here at in the DBSecWorx code library is intended solely as a warning that there is no known legitimate reason for anyone to have access to this internal security package.
 
Recommended Security Rules

 NEVER
  • Grant execute on this package to any user or role
 WITH GREAT CARE
  • Check regularly to determine if execute on this package has been granted and if so treat it as highly suspicious: It should raise alarms.
 CAUTIONS
  • N/A
 
How Oracle Works
N/A N/A
 
DBMS_XDS_INT Package Information
AUTHID DEFINER
Dependencies
DBMS_ASSERT DBMS_UTILITY XS_ADMIN_UTIL
DBMS_RLS DBMS_XDS XS_DATA_SECURITY
DBMS_STANDARD XS$OLAP_POLICY XS_DATA_SECURITY_UTIL
Documented in Types & Packages No
First Available 18.1
Security Model Owned by SYS with no privileges granted. Package fis protected by an ACCESSIBLE BY clause and can only be accessed by DBMS_XDS.
Source {ORACLE_HOME}/rdbms/admin/prvtrlsa.plb
Subprograms
 
ALTER_STATIC_ACL_REFRESH
Undocumented dbms_xds_int.alter_static_acl_refresh(
schema_name  IN VARCHAR2,
table_name   IN VARCHAR2,
refresh_mode IN VARCHAR2);
TBD
 
DISABLE_OLAP_POLICY
Undocumented dbms_xds_int.disable_olap_policy(
schema_nm  IN VARCHAR2,
logical_nm IN VARCHAR2,
def_schema IN VARCHAR2);
TBD
 
DISABLE_XDS
Undocumented dbms_xds_int.disable_xds(
object_schema IN VARCHAR2,
object_name   IN VARCHAR2,
policy_name   IN VARCHAR2);
TBD
 
DROP_OLAP_POLICY
Undocumented dbms_xds_int.drop_olap_policy(
schema_nm  IN VARCHAR2,
logical_nm IN VARCHAR2,
def_schema IN VARCHAR2);
TBD
 
DROP_XDS
Undocumented dbms_xds_int.drop_xds(
object_schema IN VARCHAR2,
object_name   IN VARCHAR2,
policy_name   IN VARCHAR2);
TBD
 
ENABLE_OLAP_POLICY
Undocumented dbms_xds_int.enable_olap_policy(
schema_nm  IN VARCHAR2,
logical_nm IN VARCHAR2,
policy_nm  IN VARCHAR2,
overwrite  IN BOOLEAN,
def_schema IN VARCHAR2);
TBD
 
ENABLE_XDS
Undocumented dbms_xds_int.enable_xds(
object_schema IN VARCHAR2,
object_name   IN VARCHAR2,
enable_option IN BINARY_INTEGER,
policy_name   IN VARCHAR2,
usermv_name   IN VARCHAR2);
TBD
 
PURGE_ACL_REFRESH_HISTORY
Purges ACL refresh history with respect to the identified object

Appears to be subject to an ACCESSIBLE BY clause
dbms_xds_int.purge_acl_refresh_history(
object_schema IN VARCHAR2,
object_name   IN VARCHAR2,
purge_date    IN DATE);
sys@pdbdev as sysdba

exec dbms_xds_int.purge_acl_refresh_history('SCOTT', 'EMPCOPY', SYSDATE+1/60);
BEGIN dbms_xds_int.purge_acl_refresh_history('SCOTT', 'EMPCOPY', SYSDATE+1/60); END;
*
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00904: insufficient privilege to access object DBMS_XDS_INT
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
 
SCHEDULE_STATIC_ACL_REFRESH
Undocumented dbms_xds_int.schedule_static_acl_refresh(
schema_name     IN VARCHAR2,
table_name      IN VARCHAR2,
start_date      IN TIMESTAMP WITH TIME ZONE,
repeat_interval IN VARCHAR2,
comments        IN VARCHAR2);
TBD
 
SET_TRACE_LEVEL
Likely enables a 10046 trace on a named object

Appears to be subject to an ACCESSIBLE BY clause
dbms_xds_int.set_trace_level(
schema_name IN VARCHAR2,
table_name  IN VARCHAR2,
level       IN NUMBER);
SQL> exec dbms_xds_int.set_trace_level('SCOTT', 'EMP', 12);
BEGIN dbms_xds_int.set_trace_level('SCOTT', 'EMP', 12); END;
*
ERROR at line 1:
ORA-06550: line 1, column 7:
PLS-00904: insufficient privilege to access object DBMS_XDS_INT
ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
 
XDS$REFRESH_STATIC_ACLC
Undocumented dbms_xds_int.xds$refresh_static_acl(
schema_name IN VARCHAR2,
table_name  IN VARCHAR2,
mview_name  IN VARCHAR2,
job_name    IN VARCHAR2);
TBD

Related Topics
DBMS_XDS