adb pull /system/b2g/defaults/pref/user.js .
< edit user.js and set "ril.debugging.enabled" to true >
adb shell mount -o remount,rw /system
adb push user.js /system/b2g/defaults/pref
adb shell mount -o remount,ro /system
adb shell sync && adb reboot