The cmsd daemon must be disabled on AIX.

This is a calendar and appointment service for CDE.

The cmsd service is utilized by CDE to provide calendar functionality. If CDE is not required, this service should be disabled to prevent attacks.

From the command prompt, execute the following command: # grep "^cmsd[[:blank:]]" /etc/inetd.conf

If there is any output from the command, this is a finding.

In "/etc/inetd.conf", comment out the "cmsd" entry by running command: # chsubserver -r inetd -C /etc/inetd.conf -d -v 'cmsd' -p 'udp'

Restart inetd: # refresh -s inetd