Manual:$wgShellRestrictionMethod

Category:MediaWiki configuration settings#ShellRestrictionMethodCategory:MediaWiki configuration settings introduced in version 1.31.0#ShellRestrictionMethodCategory:MediaWiki configuration settings still in use#ShellRestrictionMethodCategory:Shell variables#ShellRestrictionMethod
Shell and process control: $wgShellRestrictionMethod
Method to use to restrict shell commands
Introduced in version:1.31.0 (Gerrit change 384930; git #Id74df0d)
Removed in version:Still in use
Allowed values:(string) or false
Default value:'autodetect' (1.35+)
false (1.31-1.34)

Details

This configuration supports 3 different values:

  • 'autodetect' - Autodetect if any restriction methods are available, currently only firejail
  • 'firejail' - Use firejail (https://firejail.wordpress.com/), a Linux sandboxing system.
  • false - Don't use any restrictions

See also

Category:MediaWiki configuration settings Category:MediaWiki configuration settings introduced in version 1.31.0 Category:MediaWiki configuration settings still in use Category:Shell variables