santad / santactl: validate all architectures within universal binari…

…es (google#249)

santactl: Update to MOLFCMClient v1.7 (google#245)

codesign check: verify all architectures (google#239)

* fileinfo rule: don't use certs that have codesigning errors

* pods: MOLCodesignChecker --> 1.8

 config: use KVO (google#234)

* config: atomically update config

* config: add an explanation for sleep usage

* config: use mobileconfig in the getters

* config: cleanup file watcher

* config: spell

* config: clear or reload sync state on sync base url change

* config: Use KVO and Dependent Keys

* config: remove debug log

* config: review updates

* config: update rule sync getter and setter names

* config: get logical

santa-driver: Deny execs with names over MAXPATHLEN with appropriate …

…errno (google#231)

santad: Stop ignoring CSInfoPlistFailed (google#204)

It is too broad a check for the few false positive events we have seen.

santactl/sync: fixed exception when file_name is None / NSNull (googl…

…e#180)

* santactl/sync: fixed exception when file_name is None / NSNull

* review updates

santabs: use the ancestor bundle when searching for binaries (google#175

)

* santabs: use the ancestor bundle when searching for binaries

* review updates

* bundle tests

Project: Add DevelopmentTeam configuration (google#157)

This is a generated xcconfig in the Rakefile which gets included by the project
to set the DEVELOPMENT_TEAM key to keep Xcode 8 happy. The development team is
figured based on the available “Mac Developer” certificate.

Also update the way SantaCache declares a ‘zero’ value, update the
OCMock pod and add a few missing includes.

santactl status: add last successful rule sync date (google#139)

* santactl status: add last successful rule sync date