I get this error message. Any thoughts?

RM696-21-3_PR_001:~# cp /etc/init/enable-swap.conf /tmp/enable-swap.conf
cp: can't open '/etc/init/enable-swap.conf': Permission denied

That only happens if you have not followed the instructions to the letter, since it will always return permission denied if you have edited that file and before aegis refhashlist is happy about the new signature.

Fixable or reflash?

its fixable if you still have opensh shell open with tcb-sign rights and matching enable-swap.conf file in filesystem ie /tmp/ that you can read sha1sum from, if not then its a reflash.

@Eminem

I fixed something like this (different file, but the same problem) after I had ariadne shell closed and had malf warning popping up on my screen.

I used aegisctl to enter permissive mode, edited the file back to what it was and used ageisctl to return to developer mode. Then IIRC I ran devel-su, ariadne sh and finally validator-init, aegis-loader and echo 1 > /sys/kernel/security/validator/flush after which the device returned to normal state and works fine till today.

Details are bit fuzzy in my head, so I'm not 100% sure about exact steps I took, but if you have no other options you might try something along those lines as last resort. Idea is to have the file in a state that it was, when refhashlist was last succesfully updated.

PS. If reflash is your only option and you want to avoid playing with refhashlist in the future I suggest you to flash to open mode.

Reflashed it and did it right this time.

Is there any way that someone could explain the whole process in a totally noobie (and I mean toooootally noobie) way or write some scripts that could do that process with one click?!

please... ^^

how can we incept opensh without a .deb package ?

I have written a complete guide for noobies (I am also one of them) but its in .docx format and contain few link to direct download software as well.. I have posted it here however it has been removed as it must have break any rule of the forum

Can anyone suggest how I can best post that guide here, without breaking the forum rules. I am happy to make changes to guide.

Cheers

If you have inception installed then you need not to install opensh instead try "ariadne sh" as both of these are same thing and give same result.

Cheers

If you use patched openmode you can just edit /etc/init/enable-swap.conf and be done with it. No additional steps needed.

If you have incepted device and are unsure about following Rainisto's step by step instruction you probably shouldn't even try it. (or atleast be aware that one typo or logging out of shell between the steps is very likely to malf your N9 and require a reflash.) Similarly if you don't have a clear idea why you are doing this, (no it won't speed up things noticeably/at all unless you have something already hogging up most of your RAM.) then don't do it.