Manual:$wgShellRestrictionMethod

Details
This configuration supports 3 different values:
 * - Autodetect if any restriction methods are available, currently only firejail
 * - Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
 * - Don't use any restrictions