What SIP is, and why it matters
System Integrity Protection is a macOS security feature that stops software, even with an administrator password, from changing protected parts of the system. Turning it off means restarting into Recovery mode and running a command, and it lowers your Mac's protection. Many companies don't allow it on work Macs.
yabai with SIP on vs partly off
| Feature | SIP on | SIP partly off (scripting addition) |
|---|---|---|
| Automatic BSP tiling of windows | Works | Works |
| Focusing, swapping and resizing windows | Works | Works |
| Creating, destroying and moving Spaces | Not available | Available |
| Window opacity, shadows and layers | Not available | Available |
Check yabai's own wiki for the current list; it changes as macOS changes.
The upkeep to expect
- The scripting addition is loaded with administrator rights, usually from yabai's config at every start, and a new macOS version can need a yabai update before it works again.
- Shortcuts come from a separate hotkey daemon such as skhd, set up in its own config file.
- Everything is configured in shell scripts and config files rather than a settings window.
Window managers that never need SIP changes
| Tool | Layout | Setup |
|---|---|---|
| LanesMac | Scrolling strip of full-height columns | Settings window, built-in shortcuts and gestures |
| AeroSpace | i3-style tree tiling with its own workspaces | TOML config file |
| Amethyst | Automatic layouts (tall, wide, columns and more) | Preferences window |
| Rectangle | Snapping to halves, thirds and quarters | Shortcuts, preferences window |
Moving from yabai to LanesMac
LanesMac uses only the Accessibility permission, so SIP stays fully on and macOS updates don't break it. Instead of splitting the screen into a binary tree, it puts each window in a column on a strip that scrolls, so opening a window never shrinks the others.
Shortcuts, two-finger swipes (hold ⌃⌥), stacks, tabbed columns, pinned columns, per-app rules and a command-line tool are built in. If you liked yabai's scripting, the lanesmac command and lanesmac:// links let you drive the strip from scripts, Raycast or Alfred.