From c48636d0b2bb577bc740cbf775847109985b459b Mon Sep 17 00:00:00 2001
From: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Date: Thu, 7 Dec 2017 14:19:40 -0500
Subject: [PATCH] changelog++

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6252283313d7..e4b844642101 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,10 @@ DEPRECATIONS/CHANGES:
 
 IMPROVEMENTS:
 
+ * audit/file: Setting a file mode of `0000` will now disable Vault from
+   automatically `chmod`ing the log file [GH-3649]
+ * auth/okta: The legacy MFA system can now be used with the Okta auth backend
+   [GH-3653]
  * auth/token: `allowed_policies` and `disallowed_policies` can now be specified
    as a comma-separated string or an array of strings [GH-3641]
  * database/mongodb: Add optional `write_concern` parameter, which can be set