Manual:$wgShellRestrictionMethod

Shell and process control: $wgShellRestrictionMethod
Method to use to restrict shell commands
Introduced in version:	1.31.0 (Gerrit change 384930; git #Id74df0d)
Removed in version:	Still in use
Allowed values:	(string) or `false`
Default value:	`'autodetect'` (1.35+) `false` (1.31-1.34)
Other settings: Alphabetical \| By function

Details

This configuration supports 3 different values:

'autodetect' - Autodetect if any restriction methods are available, currently only firejail
'firejail' - Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
false - Don't use any restrictions