Starting with this release, Oracle Label Security provides support for the Oracle Database Real Application Security user account.

This feature enables Oracle Label Security policies to be enforced for Real Application Security users by assigning labels and privileges to Real Application Security users.

To configure the Oracle Database Real Application Security user for Oracle Label Security, you can set the user_name parameter in the SA_USER_ADMIN.SET_USER_LABELS procedure and in the SA_USER_ADMIN.SET_USER_PRIVS procedure.

Oracle Label Security now supports rolling upgrades for Oracle Data Guard.

You can perform Oracle Data Guard rolling upgrades to new database releases or patch sets in a rolling fashion, which reduces the planned downtime. The total database downtime for a rolling upgrade is limited to the small amount of time that is required to execute an Oracle Data Guard switchover operation.

Starting with this release, Oracle Label Security supports the use of Oracle Label Security policies in application containers.

In addition to application container support, there are changes in how you can use Oracle Label Security in a CDB environment. As part of this enhancement, you can query the CDB_OLS_STATUS to check the enablement status of Oracle Label Security in a multitenant environment.