Shell and process control: $wgShellRestrictionMethod
Method to use to restrict shell commands
Introduced in version:1.31.0 (Gerrit change 384930; git #Id74df0d)
Removed in version:still in use
Allowed values:(string) or false
Default value:'autodetect' (1.35+)
false (1.31-1.34)


This configuration supports 3 different values:

  • 'autodetect' - Autodetect if any restriction methods are available, currently only firejail
  • 'firejail' - Use firejail (, a Linux sandboxing system.
  • false - Don't use any restrictions

See also[edit]