We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on CentOS 7, you [bold:HAVE TO] run command prior to running redhat-upgrade-tool:
  semodule -r sandbox