I used to have apparmor rules for bitcoin-qt & bitcoind (restricting interactions with the filesystem, network, devices, etc.) - never updated