README.txt

   1 TC(1)                       General Commands Manual                      TC(1)
   2
   3 NAME
   4      tc – Create and interact with trustcaches
   5
   6 SYNOPSIS
   7      tc append [-f flags] [-u uuid | 0] infile file ...
   8      tc create [-u uuid] [-v version] outfile file ...
   9      tc info [-c] [-h] [-e entrynum] file
  10      tc remove [-k] file hash ...
  11
  12 DESCRIPTION
  13      The tc utility is used to get info about and modify Apple trustcaches.
  14
  15      The following commands are supported by tc:
  16
  17      append [-f flags] [-u uuid | 0] infile file ...
  18              Modify the trustcache at infile to include each signed Mach-O in
  19              the specified path.  uuid is used to specify a custom uuid to be
  20              used.  If it is 0, the uuid will be left the same, otherwise, it
  21              will be regenerated.  If -f is specified, any new entries with
  22              have the flags specified at flags.
  23
  24      create [-u uuid] [-v version] outfile file ...
  25              Create a trustcache at outfile.  Each Mach-O found in the
  26              specified inputs will be scanned for a code signature and hashed.
  27              Any malformed or unsigned Mach-O will be ignored.  Each slice of
  28              a FAT binary will have its hash included.  Versions 0 and 1 are
  29              supported, if not specified, 1 is assumed.  If uuid is specified,
  30              that will be used instead of a randomly generated one.
  31
  32      info [-c] [-h] [-e entrynum] file
  33              Print information about file.  The output for each hash will be
  34              in the format:
  35
  36                    <cdhash> <flags> [<hash_type>]
  37
  38              If the -c is given, only the hashes will be printed.  If -h is
  39              given, only the header will be printed.  If entrynum is
  40              specified, only that entry will be printed.
  41
  42      remove [-k] file hash ...
  43              Remove each specified hash from file.  If -k is specified, the
  44              uuid will not be regenerated.  The number of removed entries will
  45              be printed.
  46
  47 EXIT STATUS
  48      The tc utility exits 0 on success, and >0 if an error occurs.
  49
  50 SEE ALSO
  51      cryptex-dump-trust-cache(1), cryptex-generate-trust-cache(1)
  52
  53 HISTORY
  54      The tc utility was written by Cameron Katri <me@cameronkatri.com>.
  55
  56 FreeBSD 14.0-CURRENT             May 19, 2022             FreeBSD 14.0-CURRENT