I'm writing a code for fanotify to listen a filesystem, but I'm having trouble writing a file move-in and move-out event, and I'd like to ask if a file is moved in a file system that's being listened to. Do their MOVED_FROM and MOVED_TO match? That is, there must be MOVED_FROM before MOVED_TO? If it's not a match, is there any way to find the moved file by a unique identifier, recording their addresses before and after the move?
Documentation and code description of the Linux kernel