openstack-neutron requires at least openstack-selinux-0.6.37-1.el7ost.noarch, but this is not reflected in the package dependencies.  If you upgrade openstack-neutron from OSP 6, the ovs-cleanup unit will fail because of:

  # audit2allow -a
  
  #============= neutron_t ==============
  allow neutron_t lib_t:dir remove_name;
  allow neutron_t neutron_tmp_t:sock_file create;