Manual:$wgShellRestrictionMethod

Details
This configuration supports 3 different values:
 * ' ': Autodetect if any restriction methods are available, currently only firejail
 * ' ': Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
 * ' ': Don't use any restrictions