Is there a way to restrict permissions to the socket interface
provided by socketcan?  Perhaps something like iptables but for CAN?
I'd like to restrict access to the CAN bus to a single application on
the system.