[coreboot-gerrit] Change in coreboot[master]: soc/intel/apollolake: Provide the option to enable DDR 2x refresh rate

[Patrick Georgi (Code Review)]

Attention is currently required from: Gaggery Tsai, Marx Wang, Nico Huber, Angel Pons, Kane Chen.
Patrick Georgi has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/48510 )

Change subject: soc/intel/apollolake: Provide the option to enable DDR 2x refresh rate
......................................................................

Patch Set 15:

(1 comment)

File src/soc/intel/apollolake/Kconfig:

https://review.coreboot.org/c/coreboot/+/48510/comment/98fea07e_3063181d 
PS14, Line 431: ENABLE_DDR_2X_REFRESH
> It's tight to DRAM. […]

The point is that even on a device where the mitigation "should" be enabled due to hardware concerns, a (sophisticated) device owner should be able to disable the mitigation without rewriting lots of code (e.g. by setting a build time flag).

Nico's example is that the owner might know that the device is used in a trusted environment only - but really any other reason is valid: they own the box, they're in charge. If they break the computer, they get to keep the pieces (and this issue isn't even about breaking the device).