Add quarantine vtable for OSX

The tables reports:
- path: The file in quarantine
- creator: The application that created the file

Example:
osquery> select * from quarantine limit 10;

+----------------------------------------------------------------------------+---------------+
| path                                                                       | creator       |
+----------------------------------------------------------------------------+---------------+
| /Applications/Adium.app                                                    | Google Chrome |
| /Applications/Adium.app/Contents                                           | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature                            | Google Chrome |
| /Applications/Adium.app/Contents/_CodeSignature/CodeResources              | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks                                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework                | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Adium          | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Headers        | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/PrivateHeaders | Google Chrome |
| /Applications/Adium.app/Contents/Frameworks/Adium.framework/Resources      | Google Chrome |
+----------------------------------------------------------------------------+---------------+

Fixes issue #231
Thanks for all the good feedback!!

All the changes are now ready for review.

On Fri, Oct 31, 2014 at 12:55 PM, Mike Arpaia <notifications@github.com>
wrote:

> In osquery/tables/system/darwin/quarantine.cpp:
>
> > +	boost::split(values, value, boost::is_any_of(";"));
> > +	boost::trim(values[2]);
> > +
> > +	r["path"] = filePath;
> > +	r["creator"] = values[2];
> > +
> > +	results.push_back(r);
> > +	free(value);
> > +      }
> > +    } catch (...) {
> > +      // handle invalid files like /dev/fd/3
> > +    }
> > +    try {
> > +      ++it;
> > +    } catch (std::exception &ex) {
> > +      it.no_push(); // handle permission error.
>
> maybe a LOG(INFO) or LOG(WARNING) here?
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/facebook/osquery/pull/310/files#r19689747>.
>



-- 
"Las montañas no son estadios donde satisfacer nuestra ambición de logros,
son las catedrales donde practicar nuestra religión."
Anatoli Bukréyev