minkey27
(Minkey27)
January 8, 2025, 10:44am
63
Reinstalling worked for me. After rebooting it will give another Malware blocked message, but Docker Desktop keeps working.
oscarvgg
(Oscar Vicente Gonzalez Greco)
January 8, 2025, 10:45am
64
The question mark button at the top right corner only takes you to the Tips app
1 Like
yaroon
(Yaroon)
January 8, 2025, 10:45am
65
This where the question mark leads to on macOS Sonoma 14.7.2
The app has been modified or damaged
The app has been modified, and its code does not match the original signed code. The app may be broken or corrupted, or it may have been tampered with. If you think that an app has been damaged or tampered with, you should delete it by dragging it to the Trash.
Some apps and tools, such as AppleScript or JavaScript applications and some legacy tools, modify themselves after signing. These types of apps cannot be opened unless you override the security settings on your Mac. See Open an app by overriding security settings.
To learn how to protect your Mac from harmful software, see Protect your Mac from malware.
hansaz0ne
(Hans Schiessl)
January 8, 2025, 10:47am
66
Finallty, it fixed the issue! Thanks @benmuiruri
henryallen04
(FIFTY FIVE AND FIVE)
January 8, 2025, 10:52am
67
Just come into work today received the same error message installed and uninstalled docker recieving the same error.
bytezorvin
(Mehul Chauhan)
January 8, 2025, 11:01am
68
I had delete the said file and could not open docker now
Any idea when it will be solved ? as making something PrivilegedTools which is identified as malware for any reasons doesn’t seems like good idea.
daniking
(Daniel Niskhizov)
January 8, 2025, 11:11am
70
After reaching out for Apple support and installing Docker from Safe Mode it solved the problem
rimelek
(Ákos Takács)
January 8, 2025, 11:17am
71
I can’t tell that, but Docker is working on it. You can watch the GitHub issue as well to see the progress and the recommended workarounds
opened 05:29PM - 07 Jan 25 UTC
kind/bug
area/osx
### Description
Whenever Docker is started, this error is shown:
Malware Block… ed. “com.docker.socket” was not opened because it contains malware. this action did not harm your mac.
### Reproduce
1. Start Docker
2. See the error
<img width="381" alt="Image" src="https://github.com/user-attachments/assets/8a3809dc-4575-4e58-b5e2-0b5dc34d6413" />
### Expected behavior
Docker should start correctly and no error should be shown
# Workaround
> [!IMPORTANT]
> If you face this issue, try the following procedure:
>
> 1. Quit Docker Desktop and check that no remaining docker processes are running using the Activity Monitor
> 2. Run the following commands:
>
> ```
> sudo cp /Applications/Docker.app/Contents/Library/LaunchServices/com.docker.vmnetd /Library/PrivilegedHelperTools/
> sudo cp /Applications/Docker.app/Contents/MacOS/com.docker.socket /Library/PrivilegedHelperTools/
> ```
>
> 3. Restart Docker Desktop.
>
> If that still doesn't work, download one of the currently supported release from the [Release notes](https://docs.docker.com/desktop/release-notes/) and re-apply step 2.
As suggested by @mat007 [running this command](https://github.com/docker/for-mac/issues/7520#issuecomment-2576016692) is working for most of people that had this problem.
<details>
<summary>Original issue details</summary>
### docker version
```bash
Client:
Version: 26.1.4
API version: 1.45
Go version: go1.21.11
Git commit: 5650f9b
Built: Wed Jun 5 11:26:02 2024
OS/Arch: darwin/arm64
Context: desktop-linux
Cannot connect to the Docker daemon at unix:///Users/admin/.docker/run/docker.sock. Is the docker daemon running?
(Can't get docker started to check more details)
----
Asked for a friend running Docker in the same version and this is the output:
Client:
Version: 27.0.3
API version: 1.46
Go version: go1.21.11
Git commit: 7d4bcd8
Built: Fri Jun 28 23:59:41 2024
OS/Arch: darwin/arm64
Context: desktop-linux
Server: Docker Desktop 4.32.0 (157355)
Engine:
Version: 27.0.3
API version: 1.46 (minimum version 1.24)
Go version: go1.21.11
Git commit: 662f78c
Built: Sat Jun 29 00:02:44 2024
OS/Arch: linux/arm64
Experimental: false
containerd:
Version: 1.7.18
GitCommit: ae71819c4f5e67bb4d5ae76a6b735f29cc25774e
runc:
Version: 1.7.18
GitCommit: v1.1.13-0-g58aa920
docker-init:
Version: 0.19.0
GitCommit: de40ad0
```
### docker info
```bash
lient:
Version: 27.0.3
Context: desktop-linux
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.15.1-desktop.1
Path: /Users/lorenzo/.docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.28.1-desktop.1
Path: /Users/lorenzo/.docker/cli-plugins/docker-compose
debug: Get a shell into any image or container (Docker Inc.)
Version: 0.0.32
Path: /Users/lorenzo/.docker/cli-plugins/docker-debug
desktop: Docker Desktop commands (Alpha) (Docker Inc.)
Version: v0.0.14
Path: /Users/lorenzo/.docker/cli-plugins/docker-desktop
dev: Docker Dev Environments (Docker Inc.)
Version: v0.1.2
Path: /Users/lorenzo/.docker/cli-plugins/docker-dev
extension: Manages Docker extensions (Docker Inc.)
Version: v0.2.25
Path: /Users/lorenzo/.docker/cli-plugins/docker-extension
feedback: Provide feedback, right in your terminal! (Docker Inc.)
Version: v1.0.5
Path: /Users/lorenzo/.docker/cli-plugins/docker-feedback
init: Creates Docker-related starter files for your project (Docker Inc.)
Version: v1.3.0
Path: /Users/lorenzo/.docker/cli-plugins/docker-init
sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
Version: 0.6.0
Path: /Users/lorenzo/.docker/cli-plugins/docker-sbom
scout: Docker Scout (Docker Inc.)
Version: v1.10.0
Path: /Users/lorenzo/.docker/cli-plugins/docker-scout
Server:
Containers: 10
Running: 9
Paused: 0
Stopped: 1
Images: 41
Server Version: 27.0.3
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Using metacopy: false
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: ae71819c4f5e67bb4d5ae76a6b735f29cc25774e
runc version: v1.1.13-0-g58aa920
init version: de40ad0
Security Options:
seccomp
Profile: unconfined
cgroupns
Kernel Version: 6.6.32-linuxkit
Operating System: Docker Desktop
OSType: linux
Architecture: aarch64
CPUs: 12
Total Memory: 7.657GiB
Name: docker-desktop
ID: 1e75072f-7d8f-47c3-917a-43dc08d31755
Docker Root Dir: /var/lib/docker
Debug Mode: false
HTTP Proxy: http.docker.internal:3128
HTTPS Proxy: http.docker.internal:3128
No Proxy: hubproxy.docker.internal
Labels:
com.docker.desktop.address=unix:///Users/lorenzo/Library/Containers/com.docker.docker/Data/docker-cli.sock
Experimental: false
Insecure Registries:
hubproxy.docker.internal:5555
127.0.0.0/8
Live Restore Enabled: false
```
### Diagnostics ID
Can't get a Diagnostics ID because I'm not able to open docker, the error is from MacOS
### Additional Info
I tried installing older versions of Docker but the error is the same to all of them.
</details>
poty69
(Poty69)
January 8, 2025, 12:17pm
73
you are god man! thanks a lot
aiaf
January 8, 2025, 12:25pm
75
Note that you have to also remove Docker.app from Trash completely to suppress the warnings.
copy the 2 files indicated in the Github issue, then start Docker Desktop: the installation wizard should start.
I faced the same configuration, it solved my problem.
I use Colima and Docker as a service. Installed it all via Homebrew.
I started having the same issue today and deleting /Library/PrivilegedHelperTools/com.docker.* and reinstalling Docker via Homebrew (brew resintall docker --force) fixed the issue. At least for now.
bas94
(Bas94)
January 8, 2025, 2:36pm
79
This worked for me!
Thank you
umamad
(Mohammad Saadati)
January 8, 2025, 2:37pm
80
chustonai
(Chustonai)
January 8, 2025, 4:36pm
81
Same errors (3x vnetd, socket, Docker.app) blocking “malware.”
M3Max MacBook, OS 15.3beta2
yavorprism
(Yavor Dimov)
January 8, 2025, 6:48pm
82
thank you benmuiruri this fixed it for me