Comment # 1 on bug 1052119 from Fabian Vogt

(In reply to Bruno Friedmann from comment #0)
> Found in plasma log
> 
> Path traversal attempt detected:
> "/usr/share/kservices5/plasma-applet-org.kde.plasma.networkmanagement.
> desktop" is not inside
> "/usr/share/plasma/plasmoids/org.kde.plasma.networkmanagement/"
> 
> In packaging the macro %{_kf5_servicesdir} is used
> when it seems that plasma would prefer to find the corresponding .desktop in 
> /usr/share/plasma/plasmoids/
> 
>  Any thought on that ?

I noticed that as well, seems harmless.

Our package doesn't install that file, it's the upstream CMakeLists that does
it. It might be that something in the build process tries to "optimize" the
size by replacing duplicate files with symlinks, but I'm not sure what would do
that (normally it's done with hardlinks) and I can't find any symlinks in the
package.

I can't find reports of that message on any other distro though so I'm not
entirely sure what to do here. I'll dig a bit more.