Manual:$wgShellRestrictionMethod

Details
This configuration supports 3 different values:
 * - Autodetect if any restriction methods are available, currently only firejail
 * - Use firejail ( https://firejail.wordpress.com/ ), a Linux sandboxing system.
 * - Don't use any restrictions