Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

What is rapportd? In /usr/libexec/rapportd After update to 10.13.2 Firewall asked about it

What is /usr/libexec/rapportd?

After update to 10.13.2 Firewall asked whether I want to allow network access.

Is it from apple?

If not-where does it come from? The only thing I found was that Trusteer has a tool named rapport but I did not install it (maybe in combination with another product but not that I am aware of).

OBS MacBook Pro (15-inch 2.4/2.2 GHz), macOS High Sierra (10.13.2)

Posted on Dec 7, 2017 2:00 AM

Reply
Question marked as Best reply

Posted on Feb 14, 2018 7:00 AM

Hello whstlblwr,

Yes. You are correct. There is a lot of confusion over this issue because there is a 3rd party security product called "Trusteer Rapport" that banks have been pushing on their customers for years. I'm not sure what Trusteer Rapport does, but it sure doesn't protect against adware. Here is a great example showing a truly scary amount of adware installed right alongside Trusteer Rapport: EtreCheck has detected infected adware, should I delete files?


Unfortunately, in macOS Sierra, Apple introduced a new background process and named it "rapportd". That was the source of the confusion in this thread. I've seen similar confusion in other threads.

41 replies

Feb 13, 2018 11:58 PM in response to tbhunderbird

I have a fairly limited knowlege of how MacOS works, and my suspicion is based on activity and interactions between rapportd and some other system processes, so i may be way off.. however, from what information there is known about it, is it possible that rapportd is a system process which allows other network devices access to parts of the operating system which would usually require authentication? And does so without user interaction?


The name would be sort of appropriate if that was the case too.

Feb 14, 2018 7:36 AM in response to GreenMamba

Needed to reply to my first post on this discussion. I love stock markets etc.. and I have been saying for the past 9 months if Apple doesn't expand into a new arena they are going to bleed a trillion dollar death. They obviously don't care about personal computing anymore; focusing mainly on the iPad and super high end iMac's. With that being said and all of these RANDOM processes being run from our machines collecting data with no plan or focused way to monetize this data a new "division" needs to be created.


I've always thought something with healthcare due to all info they've been collecting on users from their iPhones for years now. But they have released something even simpler and better. Paired with Geisinger a U.S based healthcare provider in the north east. Apple is releasing an app which will allow you to get all of your medical records immediately. Wow! Lol.. Where I am from (Philly) it's a difficult process to get your medical docs.


A baby's first steps. Now what does rapportd do... oh yea it's something to do with Airplay 2.0! Involving the Homepod / Apple TV / etc ..

Mar 29, 2018 10:32 AM in response to tbhunderbird

'rapportd' is a background daemon from Apple used for handoff and communications between Apple devices; and as such it is expected that firewall checks would detect this process requesting network access. The process is used by '/System/Library/PrivateFrameworks/Rapport.framework' and '/System/Library/PrivateFrameworks/RapportUI.framework'. The framework and process were first introduced in a subsequent system update to Sierra (10.12.x).


As noted in other thread posts, it has nothing to do with IBM Trusteer Rapport software.

Apr 5, 2018 6:50 AM in response to donathon

This isn't Windows. Norton is probably not helping you. I assume when you say "a slightly different IP address", it means something like your Mac is 192.168.1.10 and the other computer is 192.168.1.15, means that it's something on your local network. 192.168.x.x addresses are private - they can't be routed across the Internet. Meaning that it's not someone coming in from outside. (Same private routing applies to 10.x.x.x and 172.16.x.x-172.31.x.x networks) The fact that Norton doesn't seem to understand that the other device is on the same network segment, and doesn't know what kind of device it is communicating with, illustrates that it's not very useful.

What is rapportd? In /usr/libexec/rapportd After update to 10.13.2 Firewall asked about it

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.