Manual:$wgShellRestrictionMethod

Details
This configuration supports 3 different values:
 * : Autodetect if any restriction methods are available, currently only firejail
 * : Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
 * : Don't use any restrictions