Manual:$wgShellRestrictionMethod/en

Details
This configuration supports 3 different values:
 * ' ' - Autodetect if any restriction methods are available, currently only firejail
 * ' ' - Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
 * ' ' - Don't use any restrictions